General
- Target 2026-08-11_835f45a982732f0c2a908838b98c587c_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 894KB
- Sample260811-dcyx7stgnf
- SHA256 09d142ad5dc41a00611943ed46775227310544b54e0fb1fc115da97517bb989e
- MD5 835f45a982732f0c2a908838b98c587c
- SHA1 dbb09ba0ac17619b93de2d98d191eb7aa203ca35
- SHA512 86b1e1ddb24298eebd21eaa8d02c1ac402b6359b7304a882c0a38b7ec7f778024f0255584214434f381eff9f974c8cabf6c6f6063a3f68aa44e0e512fd1ac321
- SSDEEP 24576:yMw8KH/B1FFD28ss87eIX7+1hw1W/STK7pV:y4K51L2887eIqZSTGpV
- TLSH T17715C003BAC19076E8575231252EDB3AAF78FE054B219EDF83807D657F707D1253A28A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_835f45a982732f0c2a908838b98c587c_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_835f45a982732f0c2a908838b98c587c_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 894KB
- SHA256 09d142ad5dc41a00611943ed46775227310544b54e0fb1fc115da97517bb989e
- MD5 835f45a982732f0c2a908838b98c587c
- SHA1 dbb09ba0ac17619b93de2d98d191eb7aa203ca35
- SHA512 86b1e1ddb24298eebd21eaa8d02c1ac402b6359b7304a882c0a38b7ec7f778024f0255584214434f381eff9f974c8cabf6c6f6063a3f68aa44e0e512fd1ac321
- SSDEEP 24576:yMw8KH/B1FFD28ss87eIX7+1hw1W/STK7pV:y4K51L2887eIqZSTGpV
- TLSH T17715C003BAC19076E8575231252EDB3AAF78FE054B219EDF83807D657F707D1253A28A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory