General
- Target 2026-08-16_588ff72b98a93c02401163f9d8b5b563_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos
- Size 6.1MB
- Sample260816-e5ynkszcpe
- SHA256 e19dc5fcceec1d19f4ef721dae288ebf191b4f2173a6db1b79e83ecfa8df45fc
- MD5 588ff72b98a93c02401163f9d8b5b563
- SHA1 3ff0eaa0377dc0b02074a2c51480f3cc0b1fb448
- SHA512 9d9a64dcc670190e20ab089a38bc1465217b86ba40811d6c2ff2ec3931822ee1b3d68da3b4d4c7b24286376e128466428f31382f154127d8ccfd808e69e3eaaf
- SSDEEP 196608:Bm2S9+ULTi9fukYR5Yf6uqUG3yZxmlkT2k/XB8V+:Bm2SlL+Zl05YflfxgkTVf5
- TLSH T1AC56AE33EA8180B9C69322B1AE7EBE3EA4ADE635473851D713D49C115BB14D3A336353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_588ff72b98a93c02401163f9d8b5b563_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_588ff72b98a93c02401163f9d8b5b563_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_588ff72b98a93c02401163f9d8b5b563_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos
- Size 6.1MB
- SHA256 e19dc5fcceec1d19f4ef721dae288ebf191b4f2173a6db1b79e83ecfa8df45fc
- MD5 588ff72b98a93c02401163f9d8b5b563
- SHA1 3ff0eaa0377dc0b02074a2c51480f3cc0b1fb448
- SHA512 9d9a64dcc670190e20ab089a38bc1465217b86ba40811d6c2ff2ec3931822ee1b3d68da3b4d4c7b24286376e128466428f31382f154127d8ccfd808e69e3eaaf
- SSDEEP 196608:Bm2S9+ULTi9fukYR5Yf6uqUG3yZxmlkT2k/XB8V+:Bm2SlL+Zl05YflfxgkTVf5
- TLSH T1AC56AE33EA8180B9C69322B1AE7EBE3EA4ADE635473851D713D49C115BB14D3A336353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory