General
- Target 2026-09-08_36753c3b70d0510566a9237330cdc689_amadey_elex_hellokitty_manuscrypt
- Size 1.4MB
- Sample260910-g9kzdszbrf
- SHA256 795d6164a6769d237e5edd0925553d33534ff943b12ee9968d14b1a6b15eeabc
- MD5 36753c3b70d0510566a9237330cdc689
- SHA1 f5ef8d6158f5676c55a75421e93f2e1031408aaf
- SHA512 a22c2d3e7c5a5bbc14ca9f2cf8ae43285e329e133b4236a90a002a3f159b83bdff69952b235b94d2c6da71b54aa59abf41000cc1367c67bf68acba9e625a3275
- SSDEEP 12288:nE7er3m+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:VWyxknw4FYnshx8OfVe247
- TLSH T17265122475C2D4B2E57619330970E6725B3EFA704F70856BA3AC316E8F708E0963E967
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_36753c3b70d0510566a9237330cdc689_amadey_elex_hellokitty_manuscrypt.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_36753c3b70d0510566a9237330cdc689_amadey_elex_hellokitty_manuscrypt.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_36753c3b70d0510566a9237330cdc689_amadey_elex_hellokitty_manuscrypt
- Size 1.4MB
- SHA256 795d6164a6769d237e5edd0925553d33534ff943b12ee9968d14b1a6b15eeabc
- MD5 36753c3b70d0510566a9237330cdc689
- SHA1 f5ef8d6158f5676c55a75421e93f2e1031408aaf
- SHA512 a22c2d3e7c5a5bbc14ca9f2cf8ae43285e329e133b4236a90a002a3f159b83bdff69952b235b94d2c6da71b54aa59abf41000cc1367c67bf68acba9e625a3275
- SSDEEP 12288:nE7er3m+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:VWyxknw4FYnshx8OfVe247
- TLSH T17265122475C2D4B2E57619330970E6725B3EFA704F70856BA3AC316E8F708E0963E967
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Modifies boot configuration data using bcdedit
-
Executes dropped EXE
-
Drops file in System32 directory