General
- Target 2026-09-10_0cd13bb3195d9f9aa2e680b739e36d5a_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 625KB
- Sample260910-yxpv9avhpc
- SHA256 e8b395d7a5921b053f56ebe7740ae96f924b1414b00214b75f12b4b4a2f69dcf
- MD5 0cd13bb3195d9f9aa2e680b739e36d5a
- SHA1 3e4756dca33b1ec963df080af5656ec3f547ac08
- SHA512 e601580553887e74c1c7fddde408efdb62e86bec51fb5a7415420d033621604cf27d20858551d62ae5282301828c65de3fe78065b597ac46bdddecc56ae6a112
- SSDEEP 12288:AG8LjBTqKOcZnPX542J17agcSLM74kNZQczUB2R77yllpDANgA5aJ8u4zhwZ3Bwm:AGw8K68AKA5anF
- TLSH T118D42732A2F19A32F826307055A7A579A58DED300B84D5CFB7C4BD613E322C2F676365
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_0cd13bb3195d9f9aa2e680b739e36d5a_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_0cd13bb3195d9f9aa2e680b739e36d5a_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 625KB
- SHA256 e8b395d7a5921b053f56ebe7740ae96f924b1414b00214b75f12b4b4a2f69dcf
- MD5 0cd13bb3195d9f9aa2e680b739e36d5a
- SHA1 3e4756dca33b1ec963df080af5656ec3f547ac08
- SHA512 e601580553887e74c1c7fddde408efdb62e86bec51fb5a7415420d033621604cf27d20858551d62ae5282301828c65de3fe78065b597ac46bdddecc56ae6a112
- SSDEEP 12288:AG8LjBTqKOcZnPX542J17agcSLM74kNZQczUB2R77yllpDANgA5aJ8u4zhwZ3Bwm:AGw8K68AKA5anF
- TLSH T118D42732A2F19A32F826307055A7A579A58DED300B84D5CFB7C4BD613E322C2F676365
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory