General
- Target 2026-08-18_bc98f8629774be34d43e53da40813c5e_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 5.5MB
- Sample260818-22358aap3t
- SHA256 cbc64d9edf3742d45528a07811cb6b8be70ff8ce51e898f0fc3f235f1fd09015
- MD5 bc98f8629774be34d43e53da40813c5e
- SHA1 01863b7351622c798ce36cb1ab13ce037a172f0b
- SHA512 0abc89b94ef745824dd9afb5d0b13f78cf9614eea91e23813c5e8bbc6ff40068d56078b633206f5d8b8eafb47242df4e717cb7e8dc8959f7060bc1e97a04059b
- SSDEEP 98304:BhV1782UgXq9ouFkULGyqbVJ3MXEpAJV8F:Bm2S9+ULIUEeOF
- TLSH T17B469C5267A400F6D56BE1B8C66A9A33F7F1B40507306BDB47A1CA172F37AE15A3E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_bc98f8629774be34d43e53da40813c5e_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-s.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_bc98f8629774be34d43e53da40813c5e_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-s.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_bc98f8629774be34d43e53da40813c5e_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 5.5MB
- SHA256 cbc64d9edf3742d45528a07811cb6b8be70ff8ce51e898f0fc3f235f1fd09015
- MD5 bc98f8629774be34d43e53da40813c5e
- SHA1 01863b7351622c798ce36cb1ab13ce037a172f0b
- SHA512 0abc89b94ef745824dd9afb5d0b13f78cf9614eea91e23813c5e8bbc6ff40068d56078b633206f5d8b8eafb47242df4e717cb7e8dc8959f7060bc1e97a04059b
- SSDEEP 98304:BhV1782UgXq9ouFkULGyqbVJ3MXEpAJV8F:Bm2S9+ULIUEeOF
- TLSH T17B469C5267A400F6D56BE1B8C66A9A33F7F1B40507306BDB47A1CA172F37AE15A3E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory