2026-08-19_b65cc72615bb79268f7c9258d745b58e_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-19_b65cc72615bb79268f7c9258d745b58e_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat
Size 124KB
Sample260819-e8jntsdn8y
SHA256 889965eae2b5be770815c3b9ef2587128c1573a5ee9018c51e7a8481d81a78a8
MD5 b65cc72615bb79268f7c9258d745b58e
SHA1 ebd6a60e7e79841c85453a8ce4646721f4661b08
SHA512 c098eb19c578dbc2f93de5250d885f2a48bf6958c9079b8201dfb9c9ad3e0c86aa11ccbfb219f9734303834715c001e007f7bc0b3b527d16fa7aef45203dba31
SSDEEP 3072:FFacDl+yN68yePfUgAylbyJjzeGq9hE7FS1e0UhB8kmMA3i8sPDpP0C:FF7V95f9HRDG179H4i8smC
TLSH
T1D9C37C0075D2C572E5B60D3554A0EAB24E3DF9310FB49AEB239846B94F243C19A39F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-19_b65cc72615bb79268f7c9258d745b58e_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat

.exe 124KB

2026-08-19_b65cc72615bb79268f7c9258d745b58e_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat

IMPHASH 73a27d2da05e1963a65dd1b68cf64c3f
SHA256 889965eae2b5be770815c3b9ef2587128c1573a5ee9018c51e7a8481d81a78a8
MD5 b65cc72615bb79268f7c9258d745b58e
SHA1 ebd6a60e7e79841c85453a8ce4646721f4661b08
SHA512 c098eb19c578dbc2f93de5250d885f2a48bf6958c9079b8201dfb9c9ad3e0c86aa11ccbfb219f9734303834715c001e007f7bc0b3b527d16fa7aef45203dba31
SSDEEP 3072:FFacDl+yN68yePfUgAylbyJjzeGq9hE7FS1e0UhB8kmMA3i8sPDpP0C:FF7V95f9HRDG179H4i8smC
TLSH
T1D9C37C0075D2C572E5B60D3554A0EAB24E3DF9310FB49AEB239846B94F243C19A39F7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

b9:f4:b4:69:22:4e:3e:7e:d1:0e:5a:ae:19:99:15:3a:ea:f4:00:19:9f:82:ed:c5:53:91:51:29:e7:fc:65:fb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Magnet Forensics Inc,O=Magnet Forensics Inc,L=Waterloo,ST=Ontario,C=CA,1.2.840.113549.1.9.1=#0c176a6164406d61676e6574666f72656e736963732e636f6d

Chains

Jan 17, 2023

CN=Magnet Forensics Inc,O=Magnet Forensics Inc,L=Waterloo,ST=Ontario,C=CA,1.2.840.113549.1.9.1=#0c176a6164406d61676e6574666f72656e736963732e636f6d

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=Magnet Forensics Inc,O=Magnet Forensics Inc,L=Waterloo,ST=Ontario,C=CA,1.2.840.113549.1.9.1=#0c176a6164406d61676e6574666f72656e736963732e636f6d

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=Magnet Forensics Inc,O=Magnet Forensics Inc,L=Waterloo,ST=Ontario,C=CA,1.2.840.113549.1.9.1=#0c176a6164406d61676e6574666f72656e736963732e636f6d

Serial Number

63:71:1f:fc:5a:f4:10:0d:3f:08:d5:11

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 12, 2021 - Oct 22, 2024

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

Major OS version

Entry point

15984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Dmp2Bin.pdb

kernel32

CreateFileW GetTickCount CloseHandle ReadFile GetLastError GetOverlappedResult WriteFile WaitForSingleObjectEx GetConsoleScreenBufferInfo GetStdHandle SetConsoleTextAttribute SetConsoleCursorPosition WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetConsoleCP GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType WideCharToMultiByte GetConsoleMode FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_b65cc72615bb79268f7c9258d745b58e_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat

kernel32

generic