General
- Target 2026-08-11_9531fa5c41c64568dd969a6f1a18d71b_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 742KB
- Sample260811-fty1mscf29
- SHA256 7ebfd01741465a056491f8e14dab0afe57ce9356addec8c3c1fc545032372679
- MD5 9531fa5c41c64568dd969a6f1a18d71b
- SHA1 ccaa04a1ea9bb0021954cec3756984391c2b5bee
- SHA512 918a4e02cbd4811ff02cd908bc733530fcc0dc67c9612413b8967cc7c299cafe881eddd4bef64a02e6e471b43e728d0c9093cec0efaeecb182023116efb62e5d
- SSDEEP 12288:pG8LjBTqKObM/lj1FBgh2ZnPX542J17agcSLM74kNZQczUB2R77yllpDANgA5aJZ:pGw8KH/B1FBgz8AKA5anH
- TLSH T175F44932A2F19A32F826307055A7A979A58DED300B84D5CFB7C0BD653E322C2F676355
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_9531fa5c41c64568dd969a6f1a18d71b_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_9531fa5c41c64568dd969a6f1a18d71b_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 742KB
- SHA256 7ebfd01741465a056491f8e14dab0afe57ce9356addec8c3c1fc545032372679
- MD5 9531fa5c41c64568dd969a6f1a18d71b
- SHA1 ccaa04a1ea9bb0021954cec3756984391c2b5bee
- SHA512 918a4e02cbd4811ff02cd908bc733530fcc0dc67c9612413b8967cc7c299cafe881eddd4bef64a02e6e471b43e728d0c9093cec0efaeecb182023116efb62e5d
- SSDEEP 12288:pG8LjBTqKObM/lj1FBgh2ZnPX542J17agcSLM74kNZQczUB2R77yllpDANgA5aJZ:pGw8KH/B1FBgz8AKA5anH
- TLSH T175F44932A2F19A32F826307055A7A979A58DED300B84D5CFB7C0BD653E322C2F676355
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory