General
- Target 2026-08-28_670aaec9e92171710ffb455259c005ab_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 7.7MB
- Sample260828-smd34sdd79
- SHA256 6b80007477858f96efea86743370c11640cf95c7c8d03db333a85de37942d8c0
- MD5 670aaec9e92171710ffb455259c005ab
- SHA1 f9a2f5681f6355c5beafe6c98b791b4f5ee9c96e
- SHA512 01cf49fc9c6a0962798401057a8e92636473131388bb889c3db196fce093e1f2803c0e312dff94c45948bd81a07e4192a7670c31d421cb9afbbdbf5171530390
- SSDEEP 196608:B7rqeRDDXD2S9+ULdNPtbuPZOOmozEvlh:BCelT2SlLdNPt6ROOmozEvlh
- TLSH T15886C013F7C04076E46B613289699232D97AFC601B349BCF13947A2DAF716C26F3A356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_670aaec9e92171710ffb455259c005ab_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_670aaec9e92171710ffb455259c005ab_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackload.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_670aaec9e92171710ffb455259c005ab_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 7.7MB
- SHA256 6b80007477858f96efea86743370c11640cf95c7c8d03db333a85de37942d8c0
- MD5 670aaec9e92171710ffb455259c005ab
- SHA1 f9a2f5681f6355c5beafe6c98b791b4f5ee9c96e
- SHA512 01cf49fc9c6a0962798401057a8e92636473131388bb889c3db196fce093e1f2803c0e312dff94c45948bd81a07e4192a7670c31d421cb9afbbdbf5171530390
- SSDEEP 196608:B7rqeRDDXD2S9+ULdNPtbuPZOOmozEvlh:BCelT2SlLdNPt6ROOmozEvlh
- TLSH T15886C013F7C04076E46B613289699232D97AFC601B349BCF13947A2DAF716C26F3A356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory