General
- Target 2026-09-12_470518f99c60df399c674fe24c14dc51_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stealc_stop_vidar
- Size 10.0MB
- Sample260913-c2d4nasvg1
- SHA256 52275f362a86bac1a6862b7d9160aa753263cad18d8430fcfd9912d46add42a0
- MD5 470518f99c60df399c674fe24c14dc51
- SHA1 bd616cb10535982ffa2e008e9ebaecf4da7dc30c
- SHA512 ee2f75350889db3cb3758b91e89fef940c6b3a9297ccaf7598afe885cf54ecad428c957983dbd5ff6e93da1fd0f39f4630d8279fd3635a62c9dd76152e92919c
- SSDEEP 196608:BqE2S9+ULdNhWyZ/K0ttYVAATZb2eEXAKqo:BB2SlLdNcyZ/K0ttYZTkewqo
- TLSH T141B69E13F7E440B9E06AA175CA358721EB72BC1507B19ADF234076992F32AD17F39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_470518f99c60df399c674fe24c14dc51_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_470518f99c60df399c674fe24c14dc51_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackload.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_470518f99c60df399c674fe24c14dc51_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stealc_stop_vidar
- Size 10.0MB
- SHA256 52275f362a86bac1a6862b7d9160aa753263cad18d8430fcfd9912d46add42a0
- MD5 470518f99c60df399c674fe24c14dc51
- SHA1 bd616cb10535982ffa2e008e9ebaecf4da7dc30c
- SHA512 ee2f75350889db3cb3758b91e89fef940c6b3a9297ccaf7598afe885cf54ecad428c957983dbd5ff6e93da1fd0f39f4630d8279fd3635a62c9dd76152e92919c
- SSDEEP 196608:BqE2S9+ULdNhWyZ/K0ttYVAATZb2eEXAKqo:BB2SlLdNcyZ/K0ttYZTkewqo
- TLSH T141B69E13F7E440B9E06AA175CA358721EB72BC1507B19ADF234076992F32AD17F39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory