General
- Target 2026-08-23_25eab959eb8650366ac0bcf944fb7653_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_remcos_vidar
- Size 8.5MB
- Sample260824-svaqnaea54
- SHA256 4ecc6113d999516ca4e4ef8f2dde82adec33c02097b50afa60a1ebfa20ab06c2
- MD5 25eab959eb8650366ac0bcf944fb7653
- SHA1 f06c965974f9a513eb26b60e934ad9b29a0bd2a8
- SHA512 84113c0d39cdd3dd3efa510afd3a694d4b461e9f94d0f85e465e68be3ca1c29a01a7d46223e30c38e0e01355f91de4769136229f0f312bfdca10d82d03f38b7e
- SSDEEP 196608:BsGwSVsBN24QF/D5zqU67kiaT+uT9Guyis/I5emVPxrF:BTWi4Q9Db67kiaiuqioIzPxrF
- TLSH T1479612067BA4C1B9E0FB9178D9764A52E67AB8460B3087DF0394156E3F736E0CE39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_25eab959eb8650366ac0bcf944fb7653_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_25eab959eb8650366ac0bcf944fb7653_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_25eab959eb8650366ac0bcf944fb7653_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_remcos_vidar
- Size 8.5MB
- SHA256 4ecc6113d999516ca4e4ef8f2dde82adec33c02097b50afa60a1ebfa20ab06c2
- MD5 25eab959eb8650366ac0bcf944fb7653
- SHA1 f06c965974f9a513eb26b60e934ad9b29a0bd2a8
- SHA512 84113c0d39cdd3dd3efa510afd3a694d4b461e9f94d0f85e465e68be3ca1c29a01a7d46223e30c38e0e01355f91de4769136229f0f312bfdca10d82d03f38b7e
- SSDEEP 196608:BsGwSVsBN24QF/D5zqU67kiaT+uT9Guyis/I5emVPxrF:BTWi4Q9Db67kiaiuqioIzPxrF
- TLSH T1479612067BA4C1B9E0FB9178D9764A52E67AB8460B3087DF0394156E3F736E0CE39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory