General
- Target 2026-10-16_eb5f584fc16f7420b8b96601994f1dc0_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- Sample261017-d91has114l
- SHA256 622ec55aecef0c3f0f4dc118d06edfa702dc5a755992cf39ca2ab85ee85a72a3
- MD5 eb5f584fc16f7420b8b96601994f1dc0
- SHA1 01cff480cb1c2217329c8107d854a3e8de2a07bf
- SHA512 0c414554f7f6692648e20368df140015b6d19138e077230c996ff956b2aa9409ffc27768af9c1011de6b4a162d2000918d4e9b10bf1ba0939170776386002a31
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDRrlBu0R+J5JlLgPYfq8ZF02IlLZDw0nXea2+:6i4lZioxRfu0R+J5JlLgPbDw0nn2+
- TLSH T159B47D1379C19431F7720D3004A297F5BE7EFE20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_eb5f584fc16f7420b8b96601994f1dc0_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_eb5f584fc16f7420b8b96601994f1dc0_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_eb5f584fc16f7420b8b96601994f1dc0_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- SHA256 622ec55aecef0c3f0f4dc118d06edfa702dc5a755992cf39ca2ab85ee85a72a3
- MD5 eb5f584fc16f7420b8b96601994f1dc0
- SHA1 01cff480cb1c2217329c8107d854a3e8de2a07bf
- SHA512 0c414554f7f6692648e20368df140015b6d19138e077230c996ff956b2aa9409ffc27768af9c1011de6b4a162d2000918d4e9b10bf1ba0939170776386002a31
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFDRrlBu0R+J5JlLgPYfq8ZF02IlLZDw0nXea2+:6i4lZioxRfu0R+J5JlLgPbDw0nn2+
- TLSH T159B47D1379C19431F7720D3004A297F5BE7EFE20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE