General
- Target 2026-07-14_14321bc5cfd96c785489f6988a42cbba_amadey_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader
- Size 11.9MB
- Sample260714-e4tcgagv8z
- SHA256 7cbd08964c78ef99bf8c6a73ce1ba86dbc46d6c51b1545f34009214e3a3b8f6f
- MD5 14321bc5cfd96c785489f6988a42cbba
- SHA1 dafa3e3527cd17525a136631e4438b82decb7e50
- SHA512 e44903fc67cc6a853102974363af73b972b1ae9cd3df547422f40cc2d2be50fb311f2a80605440378e9fb79870bddb323b2824ec8fba0c9e2be3e577aa16ed6d
- SSDEEP 98304:B4TS4TS4TS4TS4TS4TS4TS4TQKjKWQckVgtev5mnlNLg:Bppppppp8KWQc0gEYnvLg
- TLSH T191C66C12A6ED116DF0F31B71EE39A266A97AFCFE6D02E51E5449740E2072F10C929337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-14_14321bc5cfd96c785489f6988a42cbba_amadey_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_14321bc5cfd96c785489f6988a42cbba_amadey_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_14321bc5cfd96c785489f6988a42cbba_amadey_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader
- Size 11.9MB
- SHA256 7cbd08964c78ef99bf8c6a73ce1ba86dbc46d6c51b1545f34009214e3a3b8f6f
- MD5 14321bc5cfd96c785489f6988a42cbba
- SHA1 dafa3e3527cd17525a136631e4438b82decb7e50
- SHA512 e44903fc67cc6a853102974363af73b972b1ae9cd3df547422f40cc2d2be50fb311f2a80605440378e9fb79870bddb323b2824ec8fba0c9e2be3e577aa16ed6d
- SSDEEP 98304:B4TS4TS4TS4TS4TS4TS4TS4TQKjKWQckVgtev5mnlNLg:Bppppppp8KWQc0gEYnvLg
- TLSH T191C66C12A6ED116DF0F31B71EE39A266A97AFCFE6D02E51E5449740E2072F10C929337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Creates new service(s)
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1