General
- Target 2026-10-01_6aa526d72984a6b2d7f271f1ca8afb29_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 725KB
- Sample261002-p3esssshmf
- SHA256 9216a40e6f9c0acfc415d61d02fc574903ab90a4b32461f1f0149e70b7c15a1a
- MD5 6aa526d72984a6b2d7f271f1ca8afb29
- SHA1 038f6834d16e815014cce63a7b284a1a6b9bac09
- SHA512 cad8fedfe52a4cefbdf589e84aabd41373d7dd2f35726d3b7d8c8d1f17feeb928c45fa8f721209e7bb47b4c9a66af9c5ae831f839704daff103582c144985c85
- SSDEEP 12288:Ov9PGxTszBAGubvoXmH3lfJ4yb+QdIKYKNCJKHZDgdVw8XkLavV2Q9yW+GGYT7SP:y5GtI/4VfJ4yL/tNCJPXUQrP0
- TLSH T138F4026231C0C0B3D97306340AB4E571963DFEB01F7956EBA7812B6A6EB46D24D38763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_6aa526d72984a6b2d7f271f1ca8afb29_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_6aa526d72984a6b2d7f271f1ca8afb29_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 725KB
- SHA256 9216a40e6f9c0acfc415d61d02fc574903ab90a4b32461f1f0149e70b7c15a1a
- MD5 6aa526d72984a6b2d7f271f1ca8afb29
- SHA1 038f6834d16e815014cce63a7b284a1a6b9bac09
- SHA512 cad8fedfe52a4cefbdf589e84aabd41373d7dd2f35726d3b7d8c8d1f17feeb928c45fa8f721209e7bb47b4c9a66af9c5ae831f839704daff103582c144985c85
- SSDEEP 12288:Ov9PGxTszBAGubvoXmH3lfJ4yb+QdIKYKNCJKHZDgdVw8XkLavV2Q9yW+GGYT7SP:y5GtI/4VfJ4yL/tNCJPXUQrP0
- TLSH T138F4026231C0C0B3D97306340AB4E571963DFEB01F7956EBA7812B6A6EB46D24D38763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1