General
- Target 2026-09-21_6eeec45f9a96d845c6ec0a4cd65a5fc2_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 485KB
- Sample260922-ppvl4aed59
- SHA256 d17333c98947f291fa570eded59673024c85ccf7ea5ddfe20f69890179cd0e58
- MD5 6eeec45f9a96d845c6ec0a4cd65a5fc2
- SHA1 8a2fbd95b5904e08caea2f6e62c705fe35552f9e
- SHA512 e8a5bd720ba51fd1466ba3941c3745f98dc460251044a6402482bb2a1c984ad1c29e24e1cb9322f78bd8b0b6cf4ae3832086c46cf2eaf4a894a6480b21306511
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFD9rlBu0R+J5JlLgPYfq8ZF02IlLZDQ0nXea2:6i4lZiox9fu0R+J5JlLgPbDQ0nn2
- TLSH T120B46C1379C18431F7720E3404A297F57E7EFE20196AA95B23C8762E5E312C3561AA7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_6eeec45f9a96d845c6ec0a4cd65a5fc2_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_6eeec45f9a96d845c6ec0a4cd65a5fc2_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_6eeec45f9a96d845c6ec0a4cd65a5fc2_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 485KB
- SHA256 d17333c98947f291fa570eded59673024c85ccf7ea5ddfe20f69890179cd0e58
- MD5 6eeec45f9a96d845c6ec0a4cd65a5fc2
- SHA1 8a2fbd95b5904e08caea2f6e62c705fe35552f9e
- SHA512 e8a5bd720ba51fd1466ba3941c3745f98dc460251044a6402482bb2a1c984ad1c29e24e1cb9322f78bd8b0b6cf4ae3832086c46cf2eaf4a894a6480b21306511
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFD9rlBu0R+J5JlLgPYfq8ZF02IlLZDQ0nXea2:6i4lZiox9fu0R+J5JlLgPbDQ0nn2
- TLSH T120B46C1379C18431F7720E3404A297F57E7EFE20196AA95B23C8762E5E312C3561AA7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE