General

  • Target
    2026-10-08_2cd26dd77c53544d58e9649dfc4d1cdb_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
  • Size 916KB
  • Sample261009-wxedeaas3l
  • SHA256 61c1ea2810c2e7c831a51c6b2dfc6fab29edea023bdc782cba1dd492507a0283
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-08_2cd26dd77c53544d58e9649dfc4d1cdb_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
    • Size 916KB
    • SHA256 61c1ea2810c2e7c831a51c6b2dfc6fab29edea023bdc782cba1dd492507a0283
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks