General
- Target 2026-09-21_48396fe53a3731deaf873472170cbddc_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- Sample260922-qs211swdrf
- SHA256 2c8bdb0fd1d10f2c5a7faab9f2a5fc4c5e2ec3cc21d9fd0a8e771a9ce5b4e0e8
- MD5 48396fe53a3731deaf873472170cbddc
- SHA1 b006c9ffd00ec39d4d65a6ff0fcd2446fde48995
- SHA512 32f6323755f601c52cf4bf7284b10bd158ffce885fc26781894412c30dc42ad47f836310e7e6f7334baefd147bfe0813b3930b9bc5def27f14b2a8ee715c919f
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFD1rlBu0R+J5JlLgPYfq8ZF02IlLZD70nXea2S:6i4lZiox1fu0R+J5JlLgPbD70nn2S
- TLSH T119B47D1379C19431F7720E3004A297F57E7EFE20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_48396fe53a3731deaf873472170cbddc_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_48396fe53a3731deaf873472170cbddc_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_48396fe53a3731deaf873472170cbddc_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- SHA256 2c8bdb0fd1d10f2c5a7faab9f2a5fc4c5e2ec3cc21d9fd0a8e771a9ce5b4e0e8
- MD5 48396fe53a3731deaf873472170cbddc
- SHA1 b006c9ffd00ec39d4d65a6ff0fcd2446fde48995
- SHA512 32f6323755f601c52cf4bf7284b10bd158ffce885fc26781894412c30dc42ad47f836310e7e6f7334baefd147bfe0813b3930b9bc5def27f14b2a8ee715c919f
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFD1rlBu0R+J5JlLgPYfq8ZF02IlLZD70nXea2S:6i4lZiox1fu0R+J5JlLgPbD70nn2S
- TLSH T119B47D1379C19431F7720E3004A297F57E7EFE20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE