General
- Target 2026-10-01_a829a7961794203e3e6213864b8f435b_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 405KB
- Sample261002-hefa4atale
- SHA256 bf9a2148b995cfbde7a50577a8ef4748a96a73f9ad01d902cfe6c38157c0a840
- MD5 a829a7961794203e3e6213864b8f435b
- SHA1 074e2b73bc2c1df47481620b4ff8dc3748bfd386
- SHA512 15674fbac9290c2acdb76f7e929f06d74e878fb31f71acd5a6c872b0f0a00c14899ebd3107636e1231c349727e248036967adcd645c7bb14f554b9ee5b8e8b7e
- SSDEEP 12288:GaoVql+84Y0ImGUcsvZZdubv7u2l35iuWX/:GDVqlzYxGBcslpiuWX/
- TLSH T1BC947B1136D08EB2E5AF043049B19A719A7BFD301F219BCB63947F593E306C19A3A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_a829a7961794203e3e6213864b8f435b_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_a829a7961794203e3e6213864b8f435b_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_a829a7961794203e3e6213864b8f435b_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 405KB
- SHA256 bf9a2148b995cfbde7a50577a8ef4748a96a73f9ad01d902cfe6c38157c0a840
- MD5 a829a7961794203e3e6213864b8f435b
- SHA1 074e2b73bc2c1df47481620b4ff8dc3748bfd386
- SHA512 15674fbac9290c2acdb76f7e929f06d74e878fb31f71acd5a6c872b0f0a00c14899ebd3107636e1231c349727e248036967adcd645c7bb14f554b9ee5b8e8b7e
- SSDEEP 12288:GaoVql+84Y0ImGUcsvZZdubv7u2l35iuWX/:GDVqlzYxGBcslpiuWX/
- TLSH T1BC947B1136D08EB2E5AF043049B19A719A7BFD301F219BCB63947F593E306C19A3A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory