General
- Target 2026-09-05_4e3851c6854f6b3de2e69a4fd6dbda6f_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat
- Size 202KB
- Sample260907-3d7deawsdt
- SHA256 479581c4e7d5656a117ea3c58eeb96138bf6275968555984828405df95a71c87
- MD5 4e3851c6854f6b3de2e69a4fd6dbda6f
- SHA1 31e3799a10c7ac147f04828c22321800e37d71ce
- SHA512 1efa0f3be9d45985a51b049ba3c64e994e2cff4e9ba1dece17da21a6662c6829b0a3f7475336b7e894fd7cc199a91a4f397c1041cd4650315914628c64db9ba8
- SSDEEP 3072:BftffjmNLUgc0FNYSIn5isiQwwJ/30FMgt3TfC0HsHvqRp9+xsJP+FTiFe:JVfjmNLU90F6UsLJ/306Sj60Hv+KJai4
- TLSH T179149E3176C184B2EA73083009F8D6719A7DFD724F6449EF63942BAA5E302D09A39777
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_4e3851c6854f6b3de2e69a4fd6dbda6f_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_4e3851c6854f6b3de2e69a4fd6dbda6f_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat
- Size 202KB
- SHA256 479581c4e7d5656a117ea3c58eeb96138bf6275968555984828405df95a71c87
- MD5 4e3851c6854f6b3de2e69a4fd6dbda6f
- SHA1 31e3799a10c7ac147f04828c22321800e37d71ce
- SHA512 1efa0f3be9d45985a51b049ba3c64e994e2cff4e9ba1dece17da21a6662c6829b0a3f7475336b7e894fd7cc199a91a4f397c1041cd4650315914628c64db9ba8
- SSDEEP 3072:BftffjmNLUgc0FNYSIn5isiQwwJ/30FMgt3TfC0HsHvqRp9+xsJP+FTiFe:JVfjmNLU90F6UsLJ/306Sj60Hv+KJai4
- TLSH T179149E3176C184B2EA73083009F8D6719A7DFD724F6449EF63942BAA5E302D09A39777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.