General
- Target 2026-09-29_36833f1b3957528ca232554abb4f2c1f_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- Sample260930-dn3ersseqa
- SHA256 1ee9a3e58aa2ccc599a7e2167cf38ac87c36e8e989489b893d2390261bb2fffd
- MD5 36833f1b3957528ca232554abb4f2c1f
- SHA1 da13aface36b11d6be7d0905d766a884aeaa318f
- SHA512 eead44b972ecc6d781e01f18ad11df787ee3994a96f5bc2fcf4402c97cba2bff151f4987f79f0191d4840d65085a9e1f5143715ba048d0b4fc301f3ae6efdb9b
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDmrlBu0R+J5JlLgPYfq8ZF02IlLZDu0nXea2J:6i4lZioxmfu0R+J5JlLgPbDu0nn2J
- TLSH T155B47D1379C19431F7720E3004A297F5BE7EFD20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_36833f1b3957528ca232554abb4f2c1f_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_36833f1b3957528ca232554abb4f2c1f_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_36833f1b3957528ca232554abb4f2c1f_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- SHA256 1ee9a3e58aa2ccc599a7e2167cf38ac87c36e8e989489b893d2390261bb2fffd
- MD5 36833f1b3957528ca232554abb4f2c1f
- SHA1 da13aface36b11d6be7d0905d766a884aeaa318f
- SHA512 eead44b972ecc6d781e01f18ad11df787ee3994a96f5bc2fcf4402c97cba2bff151f4987f79f0191d4840d65085a9e1f5143715ba048d0b4fc301f3ae6efdb9b
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDmrlBu0R+J5JlLgPYfq8ZF02IlLZDu0nXea2J:6i4lZioxmfu0R+J5JlLgPbDu0nn2J
- TLSH T155B47D1379C19431F7720E3004A297F5BE7EFD20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE