General
- Target 2026-09-22_9320fdd99d3d7185b4975529465270f2_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- Sample260922-xeqjdsda96
- SHA256 252aacd460ed9e05e6b04a32c1c174931cb6b3512d6824a98c8d5051cdf11485
- MD5 9320fdd99d3d7185b4975529465270f2
- SHA1 0a8dac05729de5099bdab3a1ed4332a2deeaefaa
- SHA512 5b3379f3f2445ffb15d0f2a93a690add3f504286d403707245e37531e551621ee91c4b15bbf69697180b7c48548585ec0b7c3b117dd17b1f73401c39a16109da
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDMrlBu0R+J5JlLgPYfq8ZF02IlLZDp0nXea2Q:6i4lZioxMfu0R+J5JlLgPbDp0nn2Q
- TLSH T197B47D1379C19431F7720E3004A297F57E7EFD20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-22_9320fdd99d3d7185b4975529465270f2_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-22_9320fdd99d3d7185b4975529465270f2_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-22_9320fdd99d3d7185b4975529465270f2_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- SHA256 252aacd460ed9e05e6b04a32c1c174931cb6b3512d6824a98c8d5051cdf11485
- MD5 9320fdd99d3d7185b4975529465270f2
- SHA1 0a8dac05729de5099bdab3a1ed4332a2deeaefaa
- SHA512 5b3379f3f2445ffb15d0f2a93a690add3f504286d403707245e37531e551621ee91c4b15bbf69697180b7c48548585ec0b7c3b117dd17b1f73401c39a16109da
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDMrlBu0R+J5JlLgPYfq8ZF02IlLZDp0nXea2Q:6i4lZioxMfu0R+J5JlLgPbDp0nn2Q
- TLSH T197B47D1379C19431F7720E3004A297F57E7EFD20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE