General
- Target 2026-09-21_26b0b28d1c6e4093f1cb57d1f47f8452_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- Sample260922-rsplcsgd54
- SHA256 136f733f409ba92d371a239069d9c4c43841a185f3ed0f889b875f8d5fb5f4fe
- MD5 26b0b28d1c6e4093f1cb57d1f47f8452
- SHA1 c34f7495f5aff4af7ce4447644f102f4e3c1c8bc
- SHA512 3eed1f501c7b560f7b5b657bbb17d43c900cc3ce7a6c3a75a9ede60871e4219904232bc4c83357e0fd59e9882288c21cda02ab600391222f547327bf81099243
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDCrlBu0R+J5JlLgPYfq8ZF02IlLZDX0nXea29:6i4lZioxCfu0R+J5JlLgPbDX0nn29
- TLSH T194B47D1379C19431F7720E3404A297F57E7EFE20196AA99B23C8762E1E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_26b0b28d1c6e4093f1cb57d1f47f8452_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_26b0b28d1c6e4093f1cb57d1f47f8452_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_26b0b28d1c6e4093f1cb57d1f47f8452_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- SHA256 136f733f409ba92d371a239069d9c4c43841a185f3ed0f889b875f8d5fb5f4fe
- MD5 26b0b28d1c6e4093f1cb57d1f47f8452
- SHA1 c34f7495f5aff4af7ce4447644f102f4e3c1c8bc
- SHA512 3eed1f501c7b560f7b5b657bbb17d43c900cc3ce7a6c3a75a9ede60871e4219904232bc4c83357e0fd59e9882288c21cda02ab600391222f547327bf81099243
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDCrlBu0R+J5JlLgPYfq8ZF02IlLZDX0nXea29:6i4lZioxCfu0R+J5JlLgPbDX0nn29
- TLSH T194B47D1379C19431F7720E3404A297F57E7EFE20196AA99B23C8762E1E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE