General
- Target 2026-08-22_28655e7006918f5fd1f1acf71aed6246_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 10.0MB
- Sample260823-m3efxswcmb
- SHA256 458e147b71a41d85a5c936e177cf8e2fa294aa3dc4a7189726e043a828322478
- MD5 28655e7006918f5fd1f1acf71aed6246
- SHA1 d00de4f7654230a7528b1ddacefb312d731b5744
- SHA512 4165d37dc1c6d9d837ed6e39360ed37879fa8187d738b9229ed76d4afd3985419a05fa925aabb54ee4b01077b1248bbce23bb24e30edb8652488356634d4406a
- SSDEEP 196608:Bm2S9+ULIUEeOziyqOoFkQRUVcpa3l3EIzMMZ8wcC:Bm2SlLIUEeqiymbqVcxINaC
- TLSH T132B6E05267A000F6D56BE1B4C66A9A33F7F5B40507306BDB47A1CA172F33AE16A3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_28655e7006918f5fd1f1acf71aed6246_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-s.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_28655e7006918f5fd1f1acf71aed6246_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-s.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_28655e7006918f5fd1f1acf71aed6246_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 10.0MB
- SHA256 458e147b71a41d85a5c936e177cf8e2fa294aa3dc4a7189726e043a828322478
- MD5 28655e7006918f5fd1f1acf71aed6246
- SHA1 d00de4f7654230a7528b1ddacefb312d731b5744
- SHA512 4165d37dc1c6d9d837ed6e39360ed37879fa8187d738b9229ed76d4afd3985419a05fa925aabb54ee4b01077b1248bbce23bb24e30edb8652488356634d4406a
- SSDEEP 196608:Bm2S9+ULIUEeOziyqOoFkQRUVcpa3l3EIzMMZ8wcC:Bm2SlLIUEeqiymbqVcxINaC
- TLSH T132B6E05267A000F6D56BE1B4C66A9A33F7F5B40507306BDB47A1CA172F33AE16A3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory