General
- Target 2026-08-27_967ca2bf5e410d88ed9d8333db544ccc_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_icedid_luca-stealer_njrat_smoke-loader_vidar
- Size 43.0MB
- Sample260827-phn6qsgr3t
- SHA256 a90be36e1912dd1276a46cc222c7304c7ee9a05461c51ce35e648cf548a576da
- MD5 967ca2bf5e410d88ed9d8333db544ccc
- SHA1 431b3cca5c9d2aedce47915287a69780b79b2603
- SHA512 deef55c54dae838d5f3401fae0b654c363d3b62268fcba0fe48f4516d8dfb4780af58ed5f094fd2b1360848bf7b9b73397ce178fc76cec6296784d32df42c427
- SSDEEP 393216:CmHN6+JrvtmHN6+JrvtmHN6+JrvtmHN6+JrvscZEIvt:PbrIbrIbrIbrxEIvt
- TLSH T129A77C59F59720F9E46FD07089ABC336D6707C23423157AF96ACD66B2F237506C28B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_967ca2bf5e410d88ed9d8333db544ccc_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_967ca2bf5e410d88ed9d8333db544ccc_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_967ca2bf5e410d88ed9d8333db544ccc_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_icedid_luca-stealer_njrat_smoke-loader_vidar
- Size 43.0MB
- SHA256 a90be36e1912dd1276a46cc222c7304c7ee9a05461c51ce35e648cf548a576da
- MD5 967ca2bf5e410d88ed9d8333db544ccc
- SHA1 431b3cca5c9d2aedce47915287a69780b79b2603
- SHA512 deef55c54dae838d5f3401fae0b654c363d3b62268fcba0fe48f4516d8dfb4780af58ed5f094fd2b1360848bf7b9b73397ce178fc76cec6296784d32df42c427
- SSDEEP 393216:CmHN6+JrvtmHN6+JrvtmHN6+JrvtmHN6+JrvscZEIvt:PbrIbrIbrIbrxEIvt
- TLSH T129A77C59F59720F9E46FD07089ABC336D6707C23423157AF96ACD66B2F237506C28B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1