General
- Target 2026-10-25_73b5eb9aa41e7b083673acc894782333_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 4.0MB
- Sample261026-3zwtsscc52
- SHA256 4934544d83f81488d9770d36a051e8ae17d8a79c914b0076ed8916d3009ce9e0
- MD5 73b5eb9aa41e7b083673acc894782333
- SHA1 a83acb6dedd4bfed92c9a39dda30bf7f48415ff0
- SHA512 fbe2cfe780d4f68fb9fce7444c0be2293bdd710955ad7abc30bcf066cdf1bb164527d6641c22b1ad1469ce3d9a6459bd55659952952c48e9f7547cac4641bfb8
- SSDEEP 49152:BmrL8+O88hXqKs928AbXsPNIULkm9aoOAFjDfiia/fxVz8tRE:BMM/hZs92zbXsPN5kGi1VR
- TLSH T13E168E15BA78C1B5D1B6C17486A6CA17E3313C081B388ADB9351771E2E37BE1693E732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_73b5eb9aa41e7b083673acc894782333_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_73b5eb9aa41e7b083673acc894782333_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_73b5eb9aa41e7b083673acc894782333_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 4.0MB
- SHA256 4934544d83f81488d9770d36a051e8ae17d8a79c914b0076ed8916d3009ce9e0
- MD5 73b5eb9aa41e7b083673acc894782333
- SHA1 a83acb6dedd4bfed92c9a39dda30bf7f48415ff0
- SHA512 fbe2cfe780d4f68fb9fce7444c0be2293bdd710955ad7abc30bcf066cdf1bb164527d6641c22b1ad1469ce3d9a6459bd55659952952c48e9f7547cac4641bfb8
- SSDEEP 49152:BmrL8+O88hXqKs928AbXsPNIULkm9aoOAFjDfiia/fxVz8tRE:BMM/hZs92zbXsPN5kGi1VR
- TLSH T13E168E15BA78C1B5D1B6C17486A6CA17E3313C081B388ADB9351771E2E37BE1693E732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory