General
- Target 2026-10-22_3ca735ae46040f7b082f6c92fe2c889e_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 1.5MB
- Sample261024-tghpsafc43
- SHA256 0b9a89d59b01b0d0db1259b25d7508cafbc821aa03c13af2c779dc34ea5a4ea6
- MD5 3ca735ae46040f7b082f6c92fe2c889e
- SHA1 8f4ba030aab5f61377ec2cece666d84639ff8df0
- SHA512 96d0134610487d7fcb81876ed3a48bfad5cffd23f0abca6e59b6f1d8b8fdbcc146733bd1331703cf2f6d535d24736f32d3fe461f59a13ef1717c5a06b41a2dfc
- SSDEEP 24576:XRazrU3KQGWVfVR38JsCKABLQ0wBYGb8aTt3A6nzSpRQRlm:BmrU3KyV18JZKkjI86A6Q4m
- TLSH T12B659E11B7E440BAE0B7963499B59621DB7ABC214B30DBCF1394466A1F336D09E39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_3ca735ae46040f7b082f6c92fe2c889e_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_3ca735ae46040f7b082f6c92fe2c889e_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_3ca735ae46040f7b082f6c92fe2c889e_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 1.5MB
- SHA256 0b9a89d59b01b0d0db1259b25d7508cafbc821aa03c13af2c779dc34ea5a4ea6
- MD5 3ca735ae46040f7b082f6c92fe2c889e
- SHA1 8f4ba030aab5f61377ec2cece666d84639ff8df0
- SHA512 96d0134610487d7fcb81876ed3a48bfad5cffd23f0abca6e59b6f1d8b8fdbcc146733bd1331703cf2f6d535d24736f32d3fe461f59a13ef1717c5a06b41a2dfc
- SSDEEP 24576:XRazrU3KQGWVfVR38JsCKABLQ0wBYGb8aTt3A6nzSpRQRlm:BmrU3KyV18JZKkjI86A6Q4m
- TLSH T12B659E11B7E440BAE0B7963499B59621DB7ABC214B30DBCF1394466A1F336D09E39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory