General
- Target 2026-10-02_71e06660b29dfc4c7b0c2848f55b59ec_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 920KB
- Sample261003-mcjb7axyfv
- SHA256 9c3e2c1c176dc595530ab72059866228e79aa9b030e69b37a0790cca11fd9279
- MD5 71e06660b29dfc4c7b0c2848f55b59ec
- SHA1 7a0033460ae0f043e16c793e7761248fe61256d9
- SHA512 5ecd1a960968d7ad8754eddae1430956c8d8a3b93061ab982ce3087592779d5a0afe5f68d00cdbbee4abe3685a729df1472ee4596fec55b37ab3d7cbd13ec78d
- SSDEEP 24576:pqGG/NBZ33oiOFB55IMbL80k000XpKYwd+ciEXdq:8GqNBZnbOFB55j/300XIYwcmXM
- TLSH T13415125176C0C4B2DE23593089A18AB168BDFA311F244AEF7396673E2F357824D38767
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-02_71e06660b29dfc4c7b0c2848f55b59ec_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_71e06660b29dfc4c7b0c2848f55b59ec_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 920KB
- SHA256 9c3e2c1c176dc595530ab72059866228e79aa9b030e69b37a0790cca11fd9279
- MD5 71e06660b29dfc4c7b0c2848f55b59ec
- SHA1 7a0033460ae0f043e16c793e7761248fe61256d9
- SHA512 5ecd1a960968d7ad8754eddae1430956c8d8a3b93061ab982ce3087592779d5a0afe5f68d00cdbbee4abe3685a729df1472ee4596fec55b37ab3d7cbd13ec78d
- SSDEEP 24576:pqGG/NBZ33oiOFB55IMbL80k000XpKYwd+ciEXdq:8GqNBZnbOFB55j/300XIYwcmXM
- TLSH T13415125176C0C4B2DE23593089A18AB168BDFA311F244AEF7396673E2F357824D38767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1