General
- Target 2026-05-22_f0ecc6b2c29bfaf8fad05c9a1b28b084_amadey_cloudeye_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 2.1MB
- Sample260522-sqffcafv5j
- SHA256 dcbd432acaa0951c7c96ca85803e2abd3ab8da23e4d2b4fc5f6749f868cedef3
- MD5 f0ecc6b2c29bfaf8fad05c9a1b28b084
- SHA1 52707c052c3d963ddd686babc804f81e86005131
- SHA512 98cc3456fb5c7ce29f32af5c3afa31858d16587977fc3900af275d64fbeebeb44447e9be3e46c192d8650e909482f67dacd19d5a2fd0a842736549fa96725110
- SSDEEP 24576:pGw8KH/B1FB5/7t0mWTktfCF1G0fH8ZGdiiGLqoHKHTBPxFSw/71z3I4wCq+TK7k:peK51r5/7t0dkwq/qoHMThKwJzYYTGp2
- TLSH T10CA56C30B9C6C328E55541F155ACAFB6C40CED2A03A404C76BE4FE6299A17C71E36F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_f0ecc6b2c29bfaf8fad05c9a1b28b084_amadey_cloudeye_elex_hellokitty_hijackloader_luca-steale.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_f0ecc6b2c29bfaf8fad05c9a1b28b084_amadey_cloudeye_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 2.1MB
- SHA256 dcbd432acaa0951c7c96ca85803e2abd3ab8da23e4d2b4fc5f6749f868cedef3
- MD5 f0ecc6b2c29bfaf8fad05c9a1b28b084
- SHA1 52707c052c3d963ddd686babc804f81e86005131
- SHA512 98cc3456fb5c7ce29f32af5c3afa31858d16587977fc3900af275d64fbeebeb44447e9be3e46c192d8650e909482f67dacd19d5a2fd0a842736549fa96725110
- SSDEEP 24576:pGw8KH/B1FB5/7t0mWTktfCF1G0fH8ZGdiiGLqoHKHTBPxFSw/71z3I4wCq+TK7k:peK51r5/7t0dkwq/qoHMThKwJzYYTGp2
- TLSH T10CA56C30B9C6C328E55541F155ACAFB6C40CED2A03A404C76BE4FE6299A17C71E36F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory