General
- Target 2026-08-23_c04be778a104c2367e1bd984d3a8c1a2_amadey_clop_elex_hellokitty_smoke-loader
- Size 169KB
- Sample260823-2hadsswses
- SHA256 e5dab4eded1e4f7d60b6da1ab2bad2d253bdc02a32417ad1f941536e50f32772
- MD5 c04be778a104c2367e1bd984d3a8c1a2
- SHA1 f076a89586b683d4a9b4f68d12cde4ddbeed36bb
- SHA512 bb9072e27d9cf9ca119dbcce22bd6141e29d870d0358536fb6ae07134dc4601d71d3933d02c58b530b3b58355ed798f221fbf899c60467f91e8b31f772b0860d
- SSDEEP 3072:y5SZ1pZI7FrrMck1sfCNmi00hxA0MQ8O2L0zaffci74uySQMI+kjS:y5STA7y15Nm5gxA0MQX6Xci3yS0+cS
- TLSH T188047B60B0E0D4B2F2F31E3459B5DB72853DF9710F155AAF1B9416AA9F200E1E636A33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_c04be778a104c2367e1bd984d3a8c1a2_amadey_clop_elex_hellokitty_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_c04be778a104c2367e1bd984d3a8c1a2_amadey_clop_elex_hellokitty_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
clop
Ransom Note
Targets
-
- Target 2026-08-23_c04be778a104c2367e1bd984d3a8c1a2_amadey_clop_elex_hellokitty_smoke-loader
- Size 169KB
- SHA256 e5dab4eded1e4f7d60b6da1ab2bad2d253bdc02a32417ad1f941536e50f32772
- MD5 c04be778a104c2367e1bd984d3a8c1a2
- SHA1 f076a89586b683d4a9b4f68d12cde4ddbeed36bb
- SHA512 bb9072e27d9cf9ca119dbcce22bd6141e29d870d0358536fb6ae07134dc4601d71d3933d02c58b530b3b58355ed798f221fbf899c60467f91e8b31f772b0860d
- SSDEEP 3072:y5SZ1pZI7FrrMck1sfCNmi00hxA0MQ8O2L0zaffci74uySQMI+kjS:y5STA7y15Nm5gxA0MQX6Xci3yS0+cS
- TLSH T188047B60B0E0D4B2F2F31E3459B5DB72853DF9710F155AAF1B9416AA9F200E1E636A33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: clop
Ransomware discovered in early 2019 which has been actively developed since release.