General
- Target 2026-08-16_9e6c034ddb31175a6b28766d15a3eaec_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos
- Size 4.6MB
- Sample260816-hptapsbg62
- SHA256 f4a80aa29169ed5b580754753c9ecb51463731d32cfbdb55f9fdee9decb8b794
- MD5 9e6c034ddb31175a6b28766d15a3eaec
- SHA1 f797b4ec1867d97c3978c594737a4dc59000fca0
- SHA512 58036c6c412c5c5dbe4e3c6381aefe540f4d8a26f7e189281534ead45252ec5e6dcb8bc016ee141d7b2d0a526e90d5f14735f048acf9b5390ccb1ff4e7d493f0
- SSDEEP 98304:BhV1782UgXq9ouFkULGyqngi9Ypq1BTuNGYR5Z+fcBEGB/3i6:Bm2S9+ULTi9fukYR5Yf6B/y6
- TLSH T14226AF32EAC480B9C6D36172AD7EBE3EA0BDF5258B3451C713D188522BB25D36636713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_9e6c034ddb31175a6b28766d15a3eaec_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_9e6c034ddb31175a6b28766d15a3eaec_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_9e6c034ddb31175a6b28766d15a3eaec_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos
- Size 4.6MB
- SHA256 f4a80aa29169ed5b580754753c9ecb51463731d32cfbdb55f9fdee9decb8b794
- MD5 9e6c034ddb31175a6b28766d15a3eaec
- SHA1 f797b4ec1867d97c3978c594737a4dc59000fca0
- SHA512 58036c6c412c5c5dbe4e3c6381aefe540f4d8a26f7e189281534ead45252ec5e6dcb8bc016ee141d7b2d0a526e90d5f14735f048acf9b5390ccb1ff4e7d493f0
- SSDEEP 98304:BhV1782UgXq9ouFkULGyqngi9Ypq1BTuNGYR5Z+fcBEGB/3i6:Bm2S9+ULTi9fukYR5Yf6B/y6
- TLSH T14226AF32EAC480B9C6D36172AD7EBE3EA0BDF5258B3451C713D188522BB25D36636713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory