2026-07-02_9ebf4466452b6605e0e0c6a6718a92e0_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-02_9ebf4466452b6605e0e0c6a6718a92e0_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader
Size 186KB
Sample260702-yn32hsdx6w
SHA256 55ac66f486a22a4d14d004840c5da58994154217ae3599009e6931304a985be6
MD5 9ebf4466452b6605e0e0c6a6718a92e0
SHA1 529e6c6da8fd7ff9642eb8025f4dc3125794c604
SHA512 6999da3c0db24192a18af22b554bf4171bfd1a7b9deb230ca8c03f54db3ce7dc17af66352ff0d0a03e0a8631870d2daf763daef5e1821ce6b43d3d5f5e4dc3ae
SSDEEP 3072:Oh2lfTjNbD9ZTqKAvFQGsaRA65J0w0foHYszc44oP4U5K3KuvjJZTAIsXJ:68LjN7TqK8tsp6YsI4M/3lvjT8x
TLSH
T19E14BF06FAD180B2D53A0D310530CAB19E7DF9700F51AF9F67944D762F34BC1EA25AAA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-02_9ebf4466452b6605e0e0c6a6718a92e0_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-02_9ebf4466452b6605e0e0c6a6718a92e0_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader

.exe 186KB

2026-07-02_9ebf4466452b6605e0e0c6a6718a92e0_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader

IMPHASH d6d33cfa83489bf5ba9c5b52261af2b7
SHA256 55ac66f486a22a4d14d004840c5da58994154217ae3599009e6931304a985be6
MD5 9ebf4466452b6605e0e0c6a6718a92e0
SHA1 529e6c6da8fd7ff9642eb8025f4dc3125794c604
SHA512 6999da3c0db24192a18af22b554bf4171bfd1a7b9deb230ca8c03f54db3ce7dc17af66352ff0d0a03e0a8631870d2daf763daef5e1821ce6b43d3d5f5e4dc3ae
SSDEEP 3072:Oh2lfTjNbD9ZTqKAvFQGsaRA65J0w0foHYszc44oP4U5K3KuvjJZTAIsXJ:68LjN7TqK8tsp6YsI4M/3lvjT8x
TLSH
T19E14BF06FAD180B2D53A0D310530CAB19E7DF9700F51AF9F67944D762F34BC1EA25AAA
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

TEST_mi_exe_stub.pdb

kernel32

QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW OutputDebugStringW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx ReadFile CreateFileW CloseHandle WriteConsoleW DecodePointer GetExitCodeProcess CreateProcessW WaitForSingleObject SetFilePointer CreateDirectoryW SizeofResource RemoveDirectoryW GetTempPathW FormatMessageW LockResource DeleteFileW FindResourceExW LoadResource FindResourceW HeapDestroy LocalFree VerSetConditionMask CopyFileW VerifyVersionInfoW GetTempFileNameW lstrcmpiW UnmapViewOfFile CreateFileMappingW MapViewOfFile VirtualQuery

shlwapi

PathQuoteSpacesW PathAppendW

ole32

CoUninitialize CoInitializeEx

shell32

SHGetFolderPathW ord680

user32

MessageBoxW CharLowerBuffW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-02_9ebf4466452b6605e0e0c6a6718a92e0_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader

kernel32

shlwapi

ole32

shell32

user32

generic