General
- Target 2026-09-25_cc7f4977a644725bc0c31ec80334ef56_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play
- Size 109KB
- Sample260925-yazryavfma
- SHA256 0c4fd0e439180614afe859f5f76686370787483c937550d7451a92ad68580f03
- MD5 cc7f4977a644725bc0c31ec80334ef56
- SHA1 e74fb78fc46bd5eb86e5f1f93b52e72fc5138a7a
- SHA512 1e2f18c68e4aeb77a3720eb569f03f2a7bb21475c70d3c27568db689c57dd51b05bf54343db64a1277f68e6c28ed7a36f0184bef4e4a77937edc6a2b13d32f76
- SSDEEP 3072:MIuwhx9wkfILvbgOqUd7U/QSAUh+5gcXFN31lPSlbBqfq:vuwD6kuTgxAUhEShQfq
- TLSH T1ABB36C01B5C1C932D5761E3256B0EAB14A2DF9700F709EEB638919B94F306C1DA29F7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_cc7f4977a644725bc0c31ec80334ef56_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_cc7f4977a644725bc0c31ec80334ef56_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play
- Size 109KB
- SHA256 0c4fd0e439180614afe859f5f76686370787483c937550d7451a92ad68580f03
- MD5 cc7f4977a644725bc0c31ec80334ef56
- SHA1 e74fb78fc46bd5eb86e5f1f93b52e72fc5138a7a
- SHA512 1e2f18c68e4aeb77a3720eb569f03f2a7bb21475c70d3c27568db689c57dd51b05bf54343db64a1277f68e6c28ed7a36f0184bef4e4a77937edc6a2b13d32f76
- SSDEEP 3072:MIuwhx9wkfILvbgOqUd7U/QSAUh+5gcXFN31lPSlbBqfq:vuwD6kuTgxAUhEShQfq
- TLSH T1ABB36C01B5C1C932D5761E3256B0EAB14A2DF9700F709EEB638919B94F306C1DA29F7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)