General
- Target 2026-08-17_e3ad02d91a4846972eec6ca66aa4adc7_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos
- Size 1.9MB
- Sample260817-pnrh2sbl2s
- SHA256 b017bb1f507533822a2fc88e2e58457ac8eac17d9361e99bd0c01166538a429a
- MD5 e3ad02d91a4846972eec6ca66aa4adc7
- SHA1 6ee1e0a8a37db36a964fa792089b9b5f14eb8dd5
- SHA512 7eaf23421a0455b5b64a6a7d5c5349e024c872211b0930a9a23e84d7b5e8e15087bf23cb2a4e39a64538089043d5f18002cf3abaa9b1b8d3b527d883d4a1071c
- SSDEEP 49152:BmrU3KyV18ge/2887eIqZBsEZUJK9DBjcc/FCPjDj8hXZLGyqN:BhV1782UgXq9ouFkULGyqN
- TLSH T1A495CF1377E08032E8676272A56CBB3AE5AEE524073159E747D6CC263F606C39337693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_e3ad02d91a4846972eec6ca66aa4adc7_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_e3ad02d91a4846972eec6ca66aa4adc7_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_e3ad02d91a4846972eec6ca66aa4adc7_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos
- Size 1.9MB
- SHA256 b017bb1f507533822a2fc88e2e58457ac8eac17d9361e99bd0c01166538a429a
- MD5 e3ad02d91a4846972eec6ca66aa4adc7
- SHA1 6ee1e0a8a37db36a964fa792089b9b5f14eb8dd5
- SHA512 7eaf23421a0455b5b64a6a7d5c5349e024c872211b0930a9a23e84d7b5e8e15087bf23cb2a4e39a64538089043d5f18002cf3abaa9b1b8d3b527d883d4a1071c
- SSDEEP 49152:BmrU3KyV18ge/2887eIqZBsEZUJK9DBjcc/FCPjDj8hXZLGyqN:BhV1782UgXq9ouFkULGyqN
- TLSH T1A495CF1377E08032E8676272A56CBB3AE5AEE524073159E747D6CC263F606C39337693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory