General
- Target 2026-04-15_527cac7ba66ccfcb51b921a671c2aec5_amadey_cloudeye_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 2.2MB
- Sample260415-sc2fnaax2l
- SHA256 9b10936a5948cfc5e15ea2011773913045290d786caacac31395aa22914d1d21
- MD5 527cac7ba66ccfcb51b921a671c2aec5
- SHA1 1d0bdd369e6f885eb1a461ebc87648b8f0b42cd9
- SHA512 41cd3567206ecfe5cb1b1c3202bd68c987ec4525da8cb799bb6136c5efab105e4de3f99701117640c7fd6f83feb6a5617b70f9e4144964ae4c18454cff10991a
- SSDEEP 49152:y4K51L28HMf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcwTGpQ:/K5d2J/h4tZNh7XyGpQ
- TLSH T129B59E817584C139E41161B9B6B87DA58538B8A613712DCFFFC03C61AA35BC36E3A35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_527cac7ba66ccfcb51b921a671c2aec5_amadey_cloudeye_elex_hellokitty_hijackloader_luca-steale.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_527cac7ba66ccfcb51b921a671c2aec5_amadey_cloudeye_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 2.2MB
- SHA256 9b10936a5948cfc5e15ea2011773913045290d786caacac31395aa22914d1d21
- MD5 527cac7ba66ccfcb51b921a671c2aec5
- SHA1 1d0bdd369e6f885eb1a461ebc87648b8f0b42cd9
- SHA512 41cd3567206ecfe5cb1b1c3202bd68c987ec4525da8cb799bb6136c5efab105e4de3f99701117640c7fd6f83feb6a5617b70f9e4144964ae4c18454cff10991a
- SSDEEP 49152:y4K51L28HMf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcwTGpQ:/K5d2J/h4tZNh7XyGpQ
- TLSH T129B59E817584C139E41161B9B6B87DA58538B8A613712DCFFFC03C61AA35BC36E3A35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory