General
- Target 2026-08-16_a38678d7156f048abf9173abc295c080_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos
- Size 1.9MB
- Sample260816-ekfx2acp5v
- SHA256 b641be779ccf363367527d3ab04e8163b62a8c0304b9a39c76162e5a5be24543
- MD5 a38678d7156f048abf9173abc295c080
- SHA1 543727ad8666e9d87145e35669612834aa5416d1
- SHA512 545afc303da5065aad6bd8e7ee01ddf18da045a88d358d5245290d4cd6ca024ecdbc5646f43a5af77edca40696a333cbbf659f0bf17d0274ab866133190508ba
- SSDEEP 49152:BmrU3KyV18ge/2887eIqZBsEZUJK9DBjcc/FCPjDj8hXZLGyq3MikHPL:BhV1782UgXq9ouFkULGyqG
- TLSH T1EC95CF1377E18032E8276172A17CBA3AE5AEE528073199E747D2CC257F616C39337693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_a38678d7156f048abf9173abc295c080_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_a38678d7156f048abf9173abc295c080_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_a38678d7156f048abf9173abc295c080_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos
- Size 1.9MB
- SHA256 b641be779ccf363367527d3ab04e8163b62a8c0304b9a39c76162e5a5be24543
- MD5 a38678d7156f048abf9173abc295c080
- SHA1 543727ad8666e9d87145e35669612834aa5416d1
- SHA512 545afc303da5065aad6bd8e7ee01ddf18da045a88d358d5245290d4cd6ca024ecdbc5646f43a5af77edca40696a333cbbf659f0bf17d0274ab866133190508ba
- SSDEEP 49152:BmrU3KyV18ge/2887eIqZBsEZUJK9DBjcc/FCPjDj8hXZLGyq3MikHPL:BhV1782UgXq9ouFkULGyqG
- TLSH T1EC95CF1377E18032E8276172A17CBA3AE5AEE528073199E747D2CC257F616C39337693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory