General
- Target 2026-08-27_13ab901bbe11984dae4057ba7a4d3f48_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 557KB
- Sample260827-2gr78a1eme
- SHA256 3244ea30c0af75f9eecf089029d2a25efc02dfc62a7a8ab97f4bbf5f798ea604
- MD5 13ab901bbe11984dae4057ba7a4d3f48
- SHA1 54e4ab9583e1ed0234189b795a16d0d970c8126f
- SHA512 041704fc09ecb38728dfeaea1687fa217c7edd56438d55aef5998c0cdb888ea2d75f8a07a30a71bcd6f0716adfdabf76c8c4b48f03dde50599f8d876b3dd77e5
- SSDEEP 12288:A93G6vHzOASubviBNDYI37pPpPVAI93JcLw+drkiaLUrRjOt3J+AVMJ7B5f:AVGGTWB3rpPp9h9SLwgNmqRjO1TMJ7B5
- TLSH T1E5C48C77B28030DDC42B5F383CE8BB9C98687663231694576BEB1A99C7B87B64334543
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_13ab901bbe11984dae4057ba7a4d3f48_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_13ab901bbe11984dae4057ba7a4d3f48_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_13ab901bbe11984dae4057ba7a4d3f48_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 557KB
- SHA256 3244ea30c0af75f9eecf089029d2a25efc02dfc62a7a8ab97f4bbf5f798ea604
- MD5 13ab901bbe11984dae4057ba7a4d3f48
- SHA1 54e4ab9583e1ed0234189b795a16d0d970c8126f
- SHA512 041704fc09ecb38728dfeaea1687fa217c7edd56438d55aef5998c0cdb888ea2d75f8a07a30a71bcd6f0716adfdabf76c8c4b48f03dde50599f8d876b3dd77e5
- SSDEEP 12288:A93G6vHzOASubviBNDYI37pPpPVAI93JcLw+drkiaLUrRjOt3J+AVMJ7B5f:AVGGTWB3rpPp9h9SLwgNmqRjO1TMJ7B5
- TLSH T1E5C48C77B28030DDC42B5F383CE8BB9C98687663231694576BEB1A99C7B87B64334543
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables taskbar notifications via registry modification
-
Executes dropped EXE
-
Windows security modification
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory