General
- Target 2026-08-13_dee54f28f337b58f4edef91fe47ab2ff_amadey_cobalt-strike_hellokitty_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 1.6MB
- Sample260813-wddmrsvfre
- SHA256 61f5e3fb3c8e22a661df37e9177ac4eb4bb8dd38a4817a7ef6d13532d87c003e
- MD5 dee54f28f337b58f4edef91fe47ab2ff
- SHA1 6b3aba9524fd231d82f84dbd28771232187e7cf5
- SHA512 df425e010072f1cd3c7288d55ebe5ed873e0dc7cb249bda180d26f8d83e7c987dffcb810c3ced200707d934e1e15bad5e3014e116224e21a0788507ab9900666
- SSDEEP 24576:6vvgW94zsSWkfRyE2ZcFGUEGNBffACErtoFAocYj+uY64YF5AjXEx2Je7CVSszVu:lpWJE2ZctEafitmGYj+uYP4D2VPrXK
- TLSH T1BC750201F7C448F8E5A3867089A685528E39FCA90B70DEDF13C856391F757E09E39B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-13_dee54f28f337b58f4edef91fe47ab2ff_amadey_cobalt-strike_hellokitty_icedid_luca-stealer_njra.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_dee54f28f337b58f4edef91fe47ab2ff_amadey_cobalt-strike_hellokitty_icedid_luca-stealer_njra.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_dee54f28f337b58f4edef91fe47ab2ff_amadey_cobalt-strike_hellokitty_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 1.6MB
- SHA256 61f5e3fb3c8e22a661df37e9177ac4eb4bb8dd38a4817a7ef6d13532d87c003e
- MD5 dee54f28f337b58f4edef91fe47ab2ff
- SHA1 6b3aba9524fd231d82f84dbd28771232187e7cf5
- SHA512 df425e010072f1cd3c7288d55ebe5ed873e0dc7cb249bda180d26f8d83e7c987dffcb810c3ced200707d934e1e15bad5e3014e116224e21a0788507ab9900666
- SSDEEP 24576:6vvgW94zsSWkfRyE2ZcFGUEGNBffACErtoFAocYj+uY64YF5AjXEx2Je7CVSszVu:lpWJE2ZctEafitmGYj+uYP4D2VPrXK
- TLSH T1BC750201F7C448F8E5A3867089A685528E39FCA90B70DEDF13C856391F757E09E39B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association