General
- Target 2026-08-17_9b39f58931d9c5d5e4755bee50ebe4da_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_wannacry
- Size 2.5MB
- Sample260818-adyr2sed42
- SHA256 553ff2c04a7d3eed7b6533d036bceaa7942290bdfced74a0e25634c7b81e6925
- MD5 9b39f58931d9c5d5e4755bee50ebe4da
- SHA1 22138f7904e09c8a9763bf44ad5a7e6d12b6d85d
- SHA512 ec6b44c0cefc68171b2f222f495deb4bdfdf8155096ae8e34c28e8d8f9cac7bf9d9fa5890b3a5f78ae2db1a81a0de798a1631fad58abcf83aded9752113d9637
- SSDEEP 49152:NoMl8D1Ssmb4dHzxDVO88UKqAsadP0QiPzEz0AVISNT1JtMyu:NoMl8D1jmb2zxA/UKI+P0PQQAVIxR
- TLSH T1FBC5E026F2554076D07242B08596A67AC334BD61033195DB93C0DE29BFB7AD3EA3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_9b39f58931d9c5d5e4755bee50ebe4da_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_9b39f58931d9c5d5e4755bee50ebe4da_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_9b39f58931d9c5d5e4755bee50ebe4da_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_wannacry
- Size 2.5MB
- SHA256 553ff2c04a7d3eed7b6533d036bceaa7942290bdfced74a0e25634c7b81e6925
- MD5 9b39f58931d9c5d5e4755bee50ebe4da
- SHA1 22138f7904e09c8a9763bf44ad5a7e6d12b6d85d
- SHA512 ec6b44c0cefc68171b2f222f495deb4bdfdf8155096ae8e34c28e8d8f9cac7bf9d9fa5890b3a5f78ae2db1a81a0de798a1631fad58abcf83aded9752113d9637
- SSDEEP 49152:NoMl8D1Ssmb4dHzxDVO88UKqAsadP0QiPzEz0AVISNT1JtMyu:NoMl8D1jmb2zxA/UKI+P0PQQAVIxR
- TLSH T1FBC5E026F2554076D07242B08596A67AC334BD61033195DB93C0DE29BFB7AD3EA3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory