2026-07-08_d283ea5d080824077b14cad2cb8b6e0b_amadey_elex_hellokitty_luca-stealer_njrat_remcos

General

Target
2026-07-08_d283ea5d080824077b14cad2cb8b6e0b_amadey_elex_hellokitty_luca-stealer_njrat_remcos
Size 1.6MB
Sample260708-kaaadsds2v
SHA256 868aada1950f5f875028657ad019113e27b7d84c8f274172e742368ae2c4a988
MD5 d283ea5d080824077b14cad2cb8b6e0b
SHA1 831611ab938ca8abbaac6a810d07fba1a3538549
SHA512 09da574b0b0d6a57ec026c2034edeba67c5e6dd9c55190000c219b2f763c9de7970fa62ead091e6b10b5b21ed64c9a5b79ab53259c2fdba951f7adc1c46b5e95
SSDEEP 12288:hWnjatxvGtHf7oOyZakKLcDW4r7X71QYy2dx3T+sLhHm:hKGA7I4kKAl1Q32dxD+sdHm
TLSH
T19175DF58FE4EB551E81FAA3CCCA2C475DBDAAC20EE20D473B251F768C6706811A7493D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_d283ea5d080824077b14cad2cb8b6e0b_amadey_elex_hellokitty_luca-stealer_njrat_remcos

File Explorer

2026-07-08_d283ea5d080824077b14cad2cb8b6e0b_amadey_elex_hellokitty_luca-stealer_njrat_remcos

.exe 1.6MB

2026-07-08_d283ea5d080824077b14cad2cb8b6e0b_amadey_elex_hellokitty_luca-stealer_njrat_remcos

IMPHASH 90a128a9bcdf98354a20f6ced0fb5dd7
SHA256 868aada1950f5f875028657ad019113e27b7d84c8f274172e742368ae2c4a988
MD5 d283ea5d080824077b14cad2cb8b6e0b
SHA1 831611ab938ca8abbaac6a810d07fba1a3538549
SHA512 09da574b0b0d6a57ec026c2034edeba67c5e6dd9c55190000c219b2f763c9de7970fa62ead091e6b10b5b21ed64c9a5b79ab53259c2fdba951f7adc1c46b5e95
SSDEEP 12288:hWnjatxvGtHf7oOyZakKLcDW4r7X71QYy2dx3T+sLhHm:hKGA7I4kKAl1Q32dxD+sdHm
TLSH
T19175DF58FE4EB551E81FAA3CCCA2C475DBDAAC20EE20D473B251F768C6706811A7493D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6374

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\4010328\Documents\soft\src\UrNotice\src\Release\UNUpdObs.pdb

kernel32

GetLastError GetLocalTime GetCurrentProcessId WriteFile FlushFileBuffers SetLastError OutputDebugStringW WideCharToMultiByte Sleep WriteConsoleW CreateFileW CloseHandle HeapReAlloc HeapSize SetFilePointerEx GetProcessHeap UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle GetModuleFileNameW MultiByteToWideChar ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc GetFileType LCMapStringW GetConsoleCP GetConsoleMode FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW DecodePointer

user32

GetWindowTextW MessageBoxW LoadStringW EnumWindows GetClassNameW PostMessageW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_d283ea5d080824077b14cad2cb8b6e0b_amadey_elex_hellokitty_luca-stealer_njrat_remcos

kernel32

user32

generic