General
- Target 2026-07-11_6d3624cc2665bee3b710d012a4b27af8_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhadamanthys_smoke-loader_vidar
- Size 6.3MB
- Sample260711-qfby3ac121
- SHA256 4f821939c072eeea56f7d4d20deb4703b57e12b07bc2646ef01e7b658a1b214e
- MD5 6d3624cc2665bee3b710d012a4b27af8
- SHA1 facfc44b9a429a5d082d1615494196253c56c75d
- SHA512 3295c94e513882eda1a6a1750968863669822c95a75f5fb878df92e8b1bf44691ff0145fada7e29559e097819af7e13accd984f1928cee889a6a1efae400539e
- SSDEEP 98304:22K59d2UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5DTlF2:2V2S9+ULdNPtbuPZOOmnqogHh/2
- TLSH T1A966F122FBD08037D91F12739828966196B6F4742729CFD723899A1DFF642C37E32196
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_6d3624cc2665bee3b710d012a4b27af8_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhada.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_6d3624cc2665bee3b710d012a4b27af8_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhadamanthys_smoke-loader_vidar
- Size 6.3MB
- SHA256 4f821939c072eeea56f7d4d20deb4703b57e12b07bc2646ef01e7b658a1b214e
- MD5 6d3624cc2665bee3b710d012a4b27af8
- SHA1 facfc44b9a429a5d082d1615494196253c56c75d
- SHA512 3295c94e513882eda1a6a1750968863669822c95a75f5fb878df92e8b1bf44691ff0145fada7e29559e097819af7e13accd984f1928cee889a6a1efae400539e
- SSDEEP 98304:22K59d2UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5DTlF2:2V2S9+ULdNPtbuPZOOmnqogHh/2
- TLSH T1A966F122FBD08037D91F12739828966196B6F4742729CFD723899A1DFF642C37E32196
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Shodi worm
-
Executes dropped EXE
-
Drops file in System32 directory