General
- Target 2026-08-31_52705581220437a45a06925a9784552c_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_icedid_luca-stealer_njrat_smoke-loader_vidar
- Size 33.3MB
- Sample260831-y169psygnb
- SHA256 9973e7e60141adf0f139ed4fb71b6c5a6fcc320a54f2dbeb983adbc63f7e8936
- MD5 52705581220437a45a06925a9784552c
- SHA1 94687eb6584e386cb037c782b1f722ebe89b6ac9
- SHA512 6ffd95286bc9aa24a61a6b93a1f0b7a2da089f05c11b0e39c09dda5c395dcf91430314c0b9460d8910d7244ccb386410bc7118ae4017793500d635ffeed9cfba
- SSDEEP 196608:cKWQc0gEYnvLUKWQc0gEYnvL0mHpn6F44IAWvH:1cZEIvxcZEIvQmHN6+JrvH
- TLSH T131774C09F94350F5D92B50B04DCBD3BFC6707A2682228EE7EB5DCB5B6D23B616C28215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-31_52705581220437a45a06925a9784552c_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_52705581220437a45a06925a9784552c_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_52705581220437a45a06925a9784552c_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_icedid_luca-stealer_njrat_smoke-loader_vidar
- Size 33.3MB
- SHA256 9973e7e60141adf0f139ed4fb71b6c5a6fcc320a54f2dbeb983adbc63f7e8936
- MD5 52705581220437a45a06925a9784552c
- SHA1 94687eb6584e386cb037c782b1f722ebe89b6ac9
- SHA512 6ffd95286bc9aa24a61a6b93a1f0b7a2da089f05c11b0e39c09dda5c395dcf91430314c0b9460d8910d7244ccb386410bc7118ae4017793500d635ffeed9cfba
- SSDEEP 196608:cKWQc0gEYnvLUKWQc0gEYnvL0mHpn6F44IAWvH:1cZEIvxcZEIvQmHN6+JrvH
- TLSH T131774C09F94350F5D92B50B04DCBD3BFC6707A2682228EE7EB5DCB5B6D23B616C28215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1