General
- Target 2026-08-30_ee01be1aa26c2c0bedeb47c3fe36306d_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_wannacry
- Size 1.7MB
- Sample260831-btff3svzdy
- SHA256 31238c384a1d04014bf18ae3552fe18e0e94e81cbcfcc56b9b03060c089c7992
- MD5 ee01be1aa26c2c0bedeb47c3fe36306d
- SHA1 3ac36cbab68fc277234c9ef402bcfbf0158de831
- SHA512 853c4aa21a38d517cf587a12df057862ceae1cced4a88f9d87978a6eefef3a0174d448fee7d88e8b92a93b8d5e7e01fe32803a5e713854861606f3bd22705ef6
- SSDEEP 49152:NoMl8D1Ssmb4dHzxDVO88UKqAKoMl8D1Ssmbo:NoMl8D1jmb2zxA/UK2oMl8D1jmbo
- TLSH T1DC859D27F24640B2D57241B04196A67FC334B924433199DB9784DD29FFB7AD2AA3E323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_ee01be1aa26c2c0bedeb47c3fe36306d_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_ee01be1aa26c2c0bedeb47c3fe36306d_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_ee01be1aa26c2c0bedeb47c3fe36306d_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_wannacry
- Size 1.7MB
- SHA256 31238c384a1d04014bf18ae3552fe18e0e94e81cbcfcc56b9b03060c089c7992
- MD5 ee01be1aa26c2c0bedeb47c3fe36306d
- SHA1 3ac36cbab68fc277234c9ef402bcfbf0158de831
- SHA512 853c4aa21a38d517cf587a12df057862ceae1cced4a88f9d87978a6eefef3a0174d448fee7d88e8b92a93b8d5e7e01fe32803a5e713854861606f3bd22705ef6
- SSDEEP 49152:NoMl8D1Ssmb4dHzxDVO88UKqAKoMl8D1Ssmbo:NoMl8D1jmb2zxA/UK2oMl8D1jmbo
- TLSH T1DC859D27F24640B2D57241B04196A67FC334B924433199DB9784DD29FFB7AD2AA3E323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory