General
- Target 2026-08-20_c99c40318b4bd6dafffc3311f9c8a22f_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 4.9MB
- Sample260820-njpm8ayxcv
- SHA256 ab34136981151a2cb91fa65c423777c165b5b7b845f349b47c10b68b0170c2ee
- MD5 c99c40318b4bd6dafffc3311f9c8a22f
- SHA1 ad7abd9ae214da9fbaaf37122c5c330485ada73a
- SHA512 ccbe59b0ab34568e8c34e6210009b093d18ef4d1e7ec15ab96fb04a9c6c58072b99cb51f1b53930edeebdc256a92c94f2d8e61e4cd3d0ba3bf29ffbc4a05045d
- SSDEEP 49152:BmrQEe3NY0ba5WKLgVLKRWTQ6Zs5DhgPlRaYSDA+ojhEqZtTToonbXaIHy51dgOs:B7EOt+5WLKRuy5alR3EqZ/nbXaP7j6v
- TLSH T17336AF13B79140B5E07695308A6A9332EA76BD611B3496CF0390F76E2F33AD09F39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_c99c40318b4bd6dafffc3311f9c8a22f_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_c99c40318b4bd6dafffc3311f9c8a22f_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackload.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_c99c40318b4bd6dafffc3311f9c8a22f_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 4.9MB
- SHA256 ab34136981151a2cb91fa65c423777c165b5b7b845f349b47c10b68b0170c2ee
- MD5 c99c40318b4bd6dafffc3311f9c8a22f
- SHA1 ad7abd9ae214da9fbaaf37122c5c330485ada73a
- SHA512 ccbe59b0ab34568e8c34e6210009b093d18ef4d1e7ec15ab96fb04a9c6c58072b99cb51f1b53930edeebdc256a92c94f2d8e61e4cd3d0ba3bf29ffbc4a05045d
- SSDEEP 49152:BmrQEe3NY0ba5WKLgVLKRWTQ6Zs5DhgPlRaYSDA+ojhEqZtTToonbXaIHy51dgOs:B7EOt+5WLKRuy5alR3EqZ/nbXaP7j6v
- TLSH T17336AF13B79140B5E07695308A6A9332EA76BD611B3496CF0390F76E2F33AD09F39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory