General
- Target 2026-09-22_f65192a07c0a861e5b5b1f1c317d8018_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- Sample260922-3efbbahg55
- SHA256 ed578e9c93c9a7360cb0200c42446b10bdb9f31925ae4facc194bbdef32729c3
- MD5 f65192a07c0a861e5b5b1f1c317d8018
- SHA1 42afa59a143a9a81e9227269246ce2146784fbf2
- SHA512 02b4e9fa001c3a6137f5ef7a0f0e21907f7eb1ac11003588bde6d62dcbcfd3a62ae45749d3d67aded400082f2e2d1cae71c05779ef9fe97d1a9d465afa056d17
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFD/rlBu0R+J5JlLgPYfq8ZF02IlLZDF0nXea2/:6i4lZiox/fu0R+J5JlLgPbDF0nn2/
- TLSH T122B47D1379C19431F7720E3004A297F57E7EFE20196AA99B23C8762E1E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-22_f65192a07c0a861e5b5b1f1c317d8018_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-22_f65192a07c0a861e5b5b1f1c317d8018_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-22_f65192a07c0a861e5b5b1f1c317d8018_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- SHA256 ed578e9c93c9a7360cb0200c42446b10bdb9f31925ae4facc194bbdef32729c3
- MD5 f65192a07c0a861e5b5b1f1c317d8018
- SHA1 42afa59a143a9a81e9227269246ce2146784fbf2
- SHA512 02b4e9fa001c3a6137f5ef7a0f0e21907f7eb1ac11003588bde6d62dcbcfd3a62ae45749d3d67aded400082f2e2d1cae71c05779ef9fe97d1a9d465afa056d17
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFD/rlBu0R+J5JlLgPYfq8ZF02IlLZDF0nXea2/:6i4lZiox/fu0R+J5JlLgPbDF0nn2/
- TLSH T122B47D1379C19431F7720E3004A297F57E7EFE20196AA99B23C8762E1E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE