General
- Target 2026-09-12_8cfe182e763894acaa6936eb9ae7999e_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_metamorfo_njrat
- Size 147KB
- Sample260912-1mqqxaae64
- SHA256 3500d4573d9a5fd0b624224c1b6466be2efe69735db1cfb2f681c2c053f567ad
- MD5 8cfe182e763894acaa6936eb9ae7999e
- SHA1 eaa5c9cf8e60342fe1d834403c3ae5a781dcdb4b
- SHA512 ec086e8d49c74a7e6b2973d69ec78d0bb259b3471a2b9a8ef8bf9d20d17dbddda0636bdaaa8f2bbb4542dc55fa0b38c0e6f435d066722cef82234d63eed93586
- SSDEEP 3072:yrs6SWmaJsS51iWGCJdKw9LiWbPVhNEuj/HhOMAFgeCTKVy4HN5DKzv+c:yrs6Iapimn5i+VhqyHTAgelG+c
- TLSH T11EE39C6979C0C472C5BB293114B0DBB49A3DFC310F60695B73581BBA6F603C1E62AD6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_8cfe182e763894acaa6936eb9ae7999e_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_8cfe182e763894acaa6936eb9ae7999e_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_8cfe182e763894acaa6936eb9ae7999e_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_metamorfo_njrat
- Size 147KB
- SHA256 3500d4573d9a5fd0b624224c1b6466be2efe69735db1cfb2f681c2c053f567ad
- MD5 8cfe182e763894acaa6936eb9ae7999e
- SHA1 eaa5c9cf8e60342fe1d834403c3ae5a781dcdb4b
- SHA512 ec086e8d49c74a7e6b2973d69ec78d0bb259b3471a2b9a8ef8bf9d20d17dbddda0636bdaaa8f2bbb4542dc55fa0b38c0e6f435d066722cef82234d63eed93586
- SSDEEP 3072:yrs6SWmaJsS51iWGCJdKw9LiWbPVhNEuj/HhOMAFgeCTKVy4HN5DKzv+c:yrs6Iapimn5i+VhqyHTAgelG+c
- TLSH T11EE39C6979C0C472C5BB293114B0DBB49A3DFC310F60695B73581BBA6F603C1E62AD6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.