General
- Target 2026-10-22_aebe98ec3fac9698fdb09e9f0f6f153c_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 2.1MB
- Sample261024-avy45sdh75
- SHA256 ca4cc788fb4d440144a5a33f7986f47a6d888b20d5b181b65aab1e91ffe18464
- MD5 aebe98ec3fac9698fdb09e9f0f6f153c
- SHA1 10bcd632bcd82f997ba4c307e191ff354a75dd87
- SHA512 5f8f3cd7b1143a2cffc5ebc6357a30aa9a08c1f2631263aa62fb78fd5f14dc219c999959f97fb1e483b29e0db91e59511319bc0067adf5f9175c0282a9f16e6c
- SSDEEP 24576:XRazr738GFqPqbqPb88hv/fyKspD28AbXsIV/w8EZIUywtkmqqZ:BmrL8+O88hXqKs928AbXsPNIULkmJ
- TLSH T1B7A54A21BA64817AD57180B085A6DA37C7347E18233D49C7D7817B292A3F7D27A3E732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_aebe98ec3fac9698fdb09e9f0f6f153c_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-s.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_aebe98ec3fac9698fdb09e9f0f6f153c_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-s.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_aebe98ec3fac9698fdb09e9f0f6f153c_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 2.1MB
- SHA256 ca4cc788fb4d440144a5a33f7986f47a6d888b20d5b181b65aab1e91ffe18464
- MD5 aebe98ec3fac9698fdb09e9f0f6f153c
- SHA1 10bcd632bcd82f997ba4c307e191ff354a75dd87
- SHA512 5f8f3cd7b1143a2cffc5ebc6357a30aa9a08c1f2631263aa62fb78fd5f14dc219c999959f97fb1e483b29e0db91e59511319bc0067adf5f9175c0282a9f16e6c
- SSDEEP 24576:XRazr738GFqPqbqPb88hv/fyKspD28AbXsIV/w8EZIUywtkmqqZ:BmrL8+O88hXqKs928AbXsPNIULkmJ
- TLSH T1B7A54A21BA64817AD57180B085A6DA37C7347E18233D49C7D7817B292A3F7D27A3E732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory