General
- Target 2026-10-01_4c9cae8015d4414b2ed17400c159c5ea_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- Sample261002-sjce4ssglc
- SHA256 2e40467176732f50ad1929194a522cb211aebbe51e561a6b4c0040979925fbd9
- MD5 4c9cae8015d4414b2ed17400c159c5ea
- SHA1 d428cdce37b24179716679af72a842282f65b135
- SHA512 047f8c0d9d9658c50cce3e8bc75f8e046523916e2121dcd7f003084972939a8f278e5fb4483e9c83160337c7692ea1ccedd6e5e25645489684d989266a3f9b19
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDbrlBu0R+J5JlLgPYfq8ZF02IlLZDP0nXea2xN:6i4lZioxbfu0R+J5JlLgPbDP0nn2v
- TLSH T137B47D1379C19431F7720E3004A297F57E7EFE20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_4c9cae8015d4414b2ed17400c159c5ea_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_4c9cae8015d4414b2ed17400c159c5ea_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_4c9cae8015d4414b2ed17400c159c5ea_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- SHA256 2e40467176732f50ad1929194a522cb211aebbe51e561a6b4c0040979925fbd9
- MD5 4c9cae8015d4414b2ed17400c159c5ea
- SHA1 d428cdce37b24179716679af72a842282f65b135
- SHA512 047f8c0d9d9658c50cce3e8bc75f8e046523916e2121dcd7f003084972939a8f278e5fb4483e9c83160337c7692ea1ccedd6e5e25645489684d989266a3f9b19
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDbrlBu0R+J5JlLgPYfq8ZF02IlLZDP0nXea2xN:6i4lZioxbfu0R+J5JlLgPbDP0nn2v
- TLSH T137B47D1379C19431F7720E3004A297F57E7EFE20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE