2026-07-09_913611afc6c2a35686dae7a446598a58_amadey_cloudeye_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

General

Target
2026-07-09_913611afc6c2a35686dae7a446598a58_amadey_cloudeye_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
Size 1.1MB
Sample260709-ptefnsbx4x
SHA256 a815a3909734700d39de247663e3372b3df0fa653fb6aa84fb7b465ab10f5215
MD5 913611afc6c2a35686dae7a446598a58
SHA1 6c41500179a3da135199a7aa1a21561294ef95c5
SHA512 75d89db0481f8eaeaed3d0ec9a1adbe62d9ea3bd30ae18e4366ba392113862c80f8e57cbacd631e678f33961c065bd86f2f529c23d905a5ce842ba67f706b3d3
SSDEEP 12288:eN4fGjM8LjBTqKObM/lj1FFD282DsYZnPX542J17agcSLM74kNZQczSTyUjD5xFw:yMw8KH/B1FFD28ss10TjFTjszNhmbLoH
TLSH
T1F0458D02F780E033D46E463068A9CB396B35FD952F519ADB1354B6AC2F313D1AA3925F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_913611afc6c2a35686dae7a446598a58_amadey_cloudeye_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

2026-07-09_913611afc6c2a35686dae7a446598a58_amadey_cloudeye_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

.exe 1.1MB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 a815a3909734700d39de247663e3372b3df0fa653fb6aa84fb7b465ab10f5215
MD5 913611afc6c2a35686dae7a446598a58
SHA1 6c41500179a3da135199a7aa1a21561294ef95c5
SHA512 75d89db0481f8eaeaed3d0ec9a1adbe62d9ea3bd30ae18e4366ba392113862c80f8e57cbacd631e678f33961c065bd86f2f529c23d905a5ce842ba67f706b3d3
SSDEEP 12288:eN4fGjM8LjBTqKObM/lj1FFD282DsYZnPX542J17agcSLM74kNZQczSTyUjD5xFw:yMw8KH/B1FFD28ss10TjFTjszNhmbLoH
TLSH
T1F0458D02F780E033D46E463068A9CB396B35FD952F519ADB1354B6AC2F313D1AA3925F
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths