General
- Target 2026-09-03_fd13f954276ae61a9d7d2239f9f28873_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat
- Size 202KB
- Sample260903-wh4pradj81
- SHA256 9779b0d0fcdcc4a09268e13da8eb9c886f33686545d744bf5a09f194d8511e13
- MD5 fd13f954276ae61a9d7d2239f9f28873
- SHA1 b88ce87e2c5374f7610304539b6412842ba0f27f
- SHA512 636ced1c7826353f5720b23fbdf7641930157b9e1c3c134e9b529050a33200e660b42c77b81c10b751766a8b3f8aad445aa992dcc9e9c4d7118e5a2385397303
- SSDEEP 3072:wftffjmNoxwUgc0FNYSIn5isiQwwJ/30FMgt3TfC0HsHvqRp9+xsJP+FTiFe:wVfjmN5U90F6UsLJ/306Sj60Hv+KJai4
- TLSH T1D8149D3176C184B2EAB3083009F4A6719A7DFD724F6549EF639427AA5E302C09A3D777
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_fd13f954276ae61a9d7d2239f9f28873_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_fd13f954276ae61a9d7d2239f9f28873_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat
- Size 202KB
- SHA256 9779b0d0fcdcc4a09268e13da8eb9c886f33686545d744bf5a09f194d8511e13
- MD5 fd13f954276ae61a9d7d2239f9f28873
- SHA1 b88ce87e2c5374f7610304539b6412842ba0f27f
- SHA512 636ced1c7826353f5720b23fbdf7641930157b9e1c3c134e9b529050a33200e660b42c77b81c10b751766a8b3f8aad445aa992dcc9e9c4d7118e5a2385397303
- SSDEEP 3072:wftffjmNoxwUgc0FNYSIn5isiQwwJ/30FMgt3TfC0HsHvqRp9+xsJP+FTiFe:wVfjmN5U90F6UsLJ/306Sj60Hv+KJai4
- TLSH T1D8149D3176C184B2EAB3083009F4A6719A7DFD724F6549EF639427AA5E302C09A3D777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.