General
- Target 2026-08-18_96012c9d19e99d930506c00b6289580c_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_remcos_vidar
- Size 3.0MB
- Sample260818-hdb72sfm4v
- SHA256 efcc443937b9cb93469b80392bd67cb6e5ace1e1d526aa0fd2885be77a714659
- MD5 96012c9d19e99d930506c00b6289580c
- SHA1 3de1a7f188c8df914884c81ec286acb0e1575d87
- SHA512 536e0eee06372ceca261da30137d7bbd73cc1137800308d49b88e0f78cd6dc029e231450b0c3220187853c26f17f96983630043bdf7711d33185a97610fb0cb5
- SSDEEP 24576:XRazr738G38PUreR38eB0MCZ2wrLau04YJLYq2qDFr:BmrL848ge18dMCZ2wflYFYq2qDFr
- TLSH T10EE5E882F243D95BE2D5E4348825CA72526577BD87F349FFB86C7199EA2A1D33130E02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_96012c9d19e99d930506c00b6289580c_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_96012c9d19e99d930506c00b6289580c_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_96012c9d19e99d930506c00b6289580c_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_remcos_vidar
- Size 3.0MB
- SHA256 efcc443937b9cb93469b80392bd67cb6e5ace1e1d526aa0fd2885be77a714659
- MD5 96012c9d19e99d930506c00b6289580c
- SHA1 3de1a7f188c8df914884c81ec286acb0e1575d87
- SHA512 536e0eee06372ceca261da30137d7bbd73cc1137800308d49b88e0f78cd6dc029e231450b0c3220187853c26f17f96983630043bdf7711d33185a97610fb0cb5
- SSDEEP 24576:XRazr738G38PUreR38eB0MCZ2wrLau04YJLYq2qDFr:BmrL848ge18dMCZ2wflYFYq2qDFr
- TLSH T10EE5E882F243D95BE2D5E4348825CA72526577BD87F349FFB86C7199EA2A1D33130E02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory