General
- Target 2026-07-12_6b81427124cc11f3ff8299fc0ff79c3e_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260712-p4cptsas6k
- SHA256 66a380030e7f33ded70d747814cbcaef6391a8e64b6e496200c920261ead90c7
- MD5 6b81427124cc11f3ff8299fc0ff79c3e
- SHA1 dae2c62ec000463a813383b25137e7eecd4ada2c
- SHA512 0f469d289c9f288967f46da23a13094fd65e96e0077d0ac8048f556de318925bb478a689befbe40f0f4933ed7bf295e0986fdcbdb33264acdad51ebca9f113af
- SSDEEP 24576:bw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LD:tKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo4
- TLSH T1FD65220572E08074F5F21E30A87096B55BBEFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_6b81427124cc11f3ff8299fc0ff79c3e_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_6b81427124cc11f3ff8299fc0ff79c3e_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 66a380030e7f33ded70d747814cbcaef6391a8e64b6e496200c920261ead90c7
- MD5 6b81427124cc11f3ff8299fc0ff79c3e
- SHA1 dae2c62ec000463a813383b25137e7eecd4ada2c
- SHA512 0f469d289c9f288967f46da23a13094fd65e96e0077d0ac8048f556de318925bb478a689befbe40f0f4933ed7bf295e0986fdcbdb33264acdad51ebca9f113af
- SSDEEP 24576:bw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LD:tKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo4
- TLSH T1FD65220572E08074F5F21E30A87096B55BBEFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.