General
- Target 2026-09-24_4458d440c76c8f87bd064a24bcb488e7_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- Sample260925-m73djsvale
- SHA256 d58c66e5515711095dbe8cbfc083447b120505c7ee02b5c8ae914f7adac63c92
- MD5 4458d440c76c8f87bd064a24bcb488e7
- SHA1 2253a16683e197c1aee0d97adfe9474669b96b2b
- SHA512 11103e268584ebd705212e0e965026607bae9146c7f0a8e8bf6d34370d0b13c0738a63d9272ddc6e0e6b107d4986f5a940aee40bebf7c1e550cca4c2185c458d
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDbrlBu0R+J5JlLgPYfq8ZF02IlLZDI0nXea2F:6i4lZioxbfu0R+J5JlLgPbDI0nn2F
- TLSH T19BB47D1379C19431F7720E3004A297F57E7EFD20196AA99B23C8762E5E312C3561AA7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_4458d440c76c8f87bd064a24bcb488e7_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_4458d440c76c8f87bd064a24bcb488e7_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_4458d440c76c8f87bd064a24bcb488e7_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- SHA256 d58c66e5515711095dbe8cbfc083447b120505c7ee02b5c8ae914f7adac63c92
- MD5 4458d440c76c8f87bd064a24bcb488e7
- SHA1 2253a16683e197c1aee0d97adfe9474669b96b2b
- SHA512 11103e268584ebd705212e0e965026607bae9146c7f0a8e8bf6d34370d0b13c0738a63d9272ddc6e0e6b107d4986f5a940aee40bebf7c1e550cca4c2185c458d
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDbrlBu0R+J5JlLgPYfq8ZF02IlLZDI0nXea2F:6i4lZioxbfu0R+J5JlLgPbDI0nn2F
- TLSH T19BB47D1379C19431F7720E3004A297F57E7EFD20196AA99B23C8762E5E312C3561AA7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE