General
- Target 2026-09-07_385877fb18e6f2267b226e306d0f1b23_amadey_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 4.4MB
- Sample260909-d69lssag63
- SHA256 21cfd717c05dc90df1996de49034b9d626124f41396c630eccdc9dd193bab584
- MD5 385877fb18e6f2267b226e306d0f1b23
- SHA1 e54cf50bcada73fcd45aaba4869dff7a7401a09b
- SHA512 d8dfda97a5439b990bf6965cb5bb31ac84918704d04a19c3d0dd5334ee41f487ecdad5b385a956936676b2417d48de1a3ef88789400d231ef03fb4e9af940bb4
- SSDEEP 98304:BMw/rxMPydXPYJ5lCXd/rJKj75O0AoO0WAXfGWe/9Mo/LduyD2pJLOPXBhhp2g:BD/rxMPyNYJ5lCXdDJU1O05WAXfGWeSQ
- TLSH T14E260709D742C1B5E91308B17A0BF3FE4A103A3456358CCBF6D46F99A7B2CE66625723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_385877fb18e6f2267b226e306d0f1b23_amadey_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_385877fb18e6f2267b226e306d0f1b23_amadey_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_385877fb18e6f2267b226e306d0f1b23_amadey_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 4.4MB
- SHA256 21cfd717c05dc90df1996de49034b9d626124f41396c630eccdc9dd193bab584
- MD5 385877fb18e6f2267b226e306d0f1b23
- SHA1 e54cf50bcada73fcd45aaba4869dff7a7401a09b
- SHA512 d8dfda97a5439b990bf6965cb5bb31ac84918704d04a19c3d0dd5334ee41f487ecdad5b385a956936676b2417d48de1a3ef88789400d231ef03fb4e9af940bb4
- SSDEEP 98304:BMw/rxMPydXPYJ5lCXd/rJKj75O0AoO0WAXfGWe/9Mo/LduyD2pJLOPXBhhp2g:BD/rxMPyNYJ5lCXdDJU1O05WAXfGWeSQ
- TLSH T14E260709D742C1B5E91308B17A0BF3FE4A103A3456358CCBF6D46F99A7B2CE66625723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory