General
- Target 2026-10-10_a544f44748edd4749b19f0ed26fd96e8_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- Sample261011-g8fchsdb48
- SHA256 31153d7a6323def0f5f7ea4ca2330fffb4fa7b8707f34d628febd8cb7bcbbd86
- MD5 a544f44748edd4749b19f0ed26fd96e8
- SHA1 e1f27952d218db1a8b63095d21775772770ac48d
- SHA512 f8e43f459ac62514a7611e58f7de998f4fdd4d0177f11f86ae743aae568ba1ae9558f0ced992c9cc82d22474e4c8d7bdd33005af7ea8b2059fe3513750db7e9e
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDxrlBu0R+J5JlLgPYfq8ZF02IlLZDZ0nXea25:6i4lZioxxfu0R+J5JlLgPbDZ0nn25
- TLSH T1F2B47D1379C19431F7720E3004A297F57E7EFD20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_a544f44748edd4749b19f0ed26fd96e8_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_a544f44748edd4749b19f0ed26fd96e8_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_a544f44748edd4749b19f0ed26fd96e8_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- SHA256 31153d7a6323def0f5f7ea4ca2330fffb4fa7b8707f34d628febd8cb7bcbbd86
- MD5 a544f44748edd4749b19f0ed26fd96e8
- SHA1 e1f27952d218db1a8b63095d21775772770ac48d
- SHA512 f8e43f459ac62514a7611e58f7de998f4fdd4d0177f11f86ae743aae568ba1ae9558f0ced992c9cc82d22474e4c8d7bdd33005af7ea8b2059fe3513750db7e9e
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDxrlBu0R+J5JlLgPYfq8ZF02IlLZDZ0nXea25:6i4lZioxxfu0R+J5JlLgPbDZ0nn25
- TLSH T1F2B47D1379C19431F7720E3004A297F57E7EFD20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE