General
- Target 2026-10-29_131f736acaf98ebbf967bef4805064ed_akira_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 2.9MB
- Sample261029-vpgm5a1vez
- SHA256 01d1b02585754843446c39731c0af5e80e14ecdd1adbf5ffa5bd154d01123edf
- MD5 131f736acaf98ebbf967bef4805064ed
- SHA1 91674b09ee0f1f39ba1024c829710840fc9c34d6
- SHA512 dca4a749973feb6f74cd53052217455f9a79a04ac31b8aadae5b750826220806e60a19b0dee1dfbedc38bcc03f3deedaa85a9fd6b47fea26dce9af7b72beba0c
- SSDEEP 49152:BmrU3KyV18JZKkjI86A6Q4yV49LWvqR7xCSfc18NQUJqPw53:BhV1mKk87A0Yvi/rNQUsq
- TLSH T1E6E58D17B2D540F9D07BD174CA655622EA76BC110B30AADF0394B6691F33BE09F39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-29_131f736acaf98ebbf967bef4805064ed_akira_amadey_cobalt-strike_elex_hellokitty_hijackloader_.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-29_131f736acaf98ebbf967bef4805064ed_akira_amadey_cobalt-strike_elex_hellokitty_hijackloader_.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-29_131f736acaf98ebbf967bef4805064ed_akira_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 2.9MB
- SHA256 01d1b02585754843446c39731c0af5e80e14ecdd1adbf5ffa5bd154d01123edf
- MD5 131f736acaf98ebbf967bef4805064ed
- SHA1 91674b09ee0f1f39ba1024c829710840fc9c34d6
- SHA512 dca4a749973feb6f74cd53052217455f9a79a04ac31b8aadae5b750826220806e60a19b0dee1dfbedc38bcc03f3deedaa85a9fd6b47fea26dce9af7b72beba0c
- SSDEEP 49152:BmrU3KyV18JZKkjI86A6Q4yV49LWvqR7xCSfc18NQUJqPw53:BhV1mKk87A0Yvi/rNQUsq
- TLSH T1E6E58D17B2D540F9D07BD174CA655622EA76BC110B30AADF0394B6691F33BE09F39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory