2026-07-01_36405fc64634c4c2840940374e0d8b39_amadey_elex_hellokitty_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader

General

Target
2026-07-01_36405fc64634c4c2840940374e0d8b39_amadey_elex_hellokitty_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
Size 1.0MB
Sample260701-ydmxjsfv5t
SHA256 df659d34565d10cf8d993c8498b4e9045b1e3667da3b91747827f4e02e32fec2
MD5 36405fc64634c4c2840940374e0d8b39
SHA1 19911cb076593e1b04494a779ff4910a705459c8
SHA512 70bea5b43d54833dec1de6bec9a02271ed25598f6af55a58f34e1bd981740132650397adadaa9e0a6e6c7853ffb6a0556f589a6944953d87df3c5a65761d99dd
SSDEEP 24576:pGw8Ko5mWpI2jFM5sFzfTjiWTktfCF1Gz:peKo5BjBbTjhkww
TLSH
T141354A25F883C33DE69101BA55EC9FF1A41D9A35079444C3AFE4BD539AA07C21E37B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-01_36405fc64634c4c2840940374e0d8b39_amadey_elex_hellokitty_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader

2026-07-01_36405fc64634c4c2840940374e0d8b39_amadey_elex_hellokitty_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader

.exe 1.0MB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 df659d34565d10cf8d993c8498b4e9045b1e3667da3b91747827f4e02e32fec2
MD5 36405fc64634c4c2840940374e0d8b39
SHA1 19911cb076593e1b04494a779ff4910a705459c8
SHA512 70bea5b43d54833dec1de6bec9a02271ed25598f6af55a58f34e1bd981740132650397adadaa9e0a6e6c7853ffb6a0556f589a6944953d87df3c5a65761d99dd
SSDEEP 24576:pGw8Ko5mWpI2jFM5sFzfTjiWTktfCF1Gz:peKo5BjBbTjhkww
TLSH
T141354A25F883C33DE69101BA55EC9FF1A41D9A35079444C3AFE4BD539AA07C21E37B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths