General
- Target 2026-09-27_5ce45ed1c74f099c641aa739c9a0d450_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- Sample260928-ga7dcaxtbw
- SHA256 d736b1b178c08b391a3038bf057a43de88c3bbf94607bb278dbc7b67d4941b94
- MD5 5ce45ed1c74f099c641aa739c9a0d450
- SHA1 6730d0fdc3f568d5475e087e9116553e329ce449
- SHA512 2ef2a2f603ea8b39d55aac68906c8e0bbc151e6e11d6a9e6971c7be1502b1122729eb74afbf8810b64af67a2ec91b4819858b363ff9796a05767af46a24b731f
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFD8rlBu0R+J5JlLgPYfq8ZF02IlLZDf0nXea2I2:6i4lZiox8fu0R+J5JlLgPbDf0nn2I2
- TLSH T142B47D1379C19431F7720E3404A297F57E7EFE20196AA99B23C8762E1E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-27_5ce45ed1c74f099c641aa739c9a0d450_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-27_5ce45ed1c74f099c641aa739c9a0d450_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-27_5ce45ed1c74f099c641aa739c9a0d450_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- SHA256 d736b1b178c08b391a3038bf057a43de88c3bbf94607bb278dbc7b67d4941b94
- MD5 5ce45ed1c74f099c641aa739c9a0d450
- SHA1 6730d0fdc3f568d5475e087e9116553e329ce449
- SHA512 2ef2a2f603ea8b39d55aac68906c8e0bbc151e6e11d6a9e6971c7be1502b1122729eb74afbf8810b64af67a2ec91b4819858b363ff9796a05767af46a24b731f
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFD8rlBu0R+J5JlLgPYfq8ZF02IlLZDf0nXea2I2:6i4lZiox8fu0R+J5JlLgPbDf0nn2I2
- TLSH T142B47D1379C19431F7720E3404A297F57E7EFE20196AA99B23C8762E1E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE