General
- Target 2026-11-10_f69e303a166598a0bc3432cb9b8c2eee_amadey_cobalt-strike_elex_hellokitty
- Size 482KB
- Sample261111-spms2ayzfz
- SHA256 735b7823c8f730d7c35060f6ac9a393d7e8a04294abf4eb0f0aa675f597cac2e
- MD5 f69e303a166598a0bc3432cb9b8c2eee
- SHA1 7bf976e03e3ced9b3b39484a6b05c0d15443c63e
- SHA512 47a4b289d6ab4de550737cab085e83f6dc33a9fc62f96c2d50299bb9ee99aaeb9206c486e5315294b9a4613886c7df7b677dc9393d58463209e9eb6a092ca7df
- SSDEEP 12288:8AMybSqaa7cvv2EDSGGd9rR2QWFelLOQFngCW:3Myuqadv6KQWY3ngCW
- TLSH T1ECA4E12170D08071D523153659F0EAB19B7EF9718FB16E9F73890A3E4F712C1AA32A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-10_f69e303a166598a0bc3432cb9b8c2eee_amadey_cobalt-strike_elex_hellokitty.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://roomabolishsnifftwk.shop/api
-
https://civilianurinedtsraov.shop/api
-
https://stalfbaclcalorieeis.shop/api
-
https://employhabragaomlsp.shop/api
-
https://femininiespywageg.shop/api
-
https://averageaattractiionsl.shop/api
-
https://buttockdecarderwiso.shop/api
-
https://museumtespaceorsp.shop/api
-
https://sideindexfollowragelrew.pw/api
Targets
-
- Target 2026-11-10_f69e303a166598a0bc3432cb9b8c2eee_amadey_cobalt-strike_elex_hellokitty
- Size 482KB
- SHA256 735b7823c8f730d7c35060f6ac9a393d7e8a04294abf4eb0f0aa675f597cac2e
- MD5 f69e303a166598a0bc3432cb9b8c2eee
- SHA1 7bf976e03e3ced9b3b39484a6b05c0d15443c63e
- SHA512 47a4b289d6ab4de550737cab085e83f6dc33a9fc62f96c2d50299bb9ee99aaeb9206c486e5315294b9a4613886c7df7b677dc9393d58463209e9eb6a092ca7df
- SSDEEP 12288:8AMybSqaa7cvv2EDSGGd9rR2QWFelLOQFngCW:3Myuqadv6KQWY3ngCW
- TLSH T1ECA4E12170D08071D523153659F0EAB19B7EF9718FB16E9F73890A3E4F712C1AA32A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Suspicious use of SetThreadContext