General
- Target 2026-07-15_f1f98875a5d0016671105d9b4b6c4b15_amadey_elex_floxif_hellokitty_luca-stealer_njrat
- Size 204KB
- Sample260715-p9asesf15v
- SHA256 ae9a8d5e05b767940baedc81aa82eac9482f62ae1216cf5806d543f4e84a5cec
- MD5 f1f98875a5d0016671105d9b4b6c4b15
- SHA1 301edb497f84008b7b63cf3329bcc0c76584a24e
- SHA512 3642494dce4baeb0334cc52ddb71ecb443ffa8853fb667dca6c8da09e172bd4087ef0225973be92e2d652951e291e09ac07474aa1761ee8f46d753789da53078
- SSDEEP 6144:dbxytNBjXQolw9R0N4BV+UdvrEFp7hKMRwO:dbxytN1Qb/0N4BjvrEH7LL
- TLSH T11624C00071C183FAE8721530347CABB199ECE93C0E2A59ABE35915265E7C1D29639F7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_f1f98875a5d0016671105d9b4b6c4b15_amadey_elex_floxif_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_f1f98875a5d0016671105d9b4b6c4b15_amadey_elex_floxif_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_f1f98875a5d0016671105d9b4b6c4b15_amadey_elex_floxif_hellokitty_luca-stealer_njrat
- Size 204KB
- SHA256 ae9a8d5e05b767940baedc81aa82eac9482f62ae1216cf5806d543f4e84a5cec
- MD5 f1f98875a5d0016671105d9b4b6c4b15
- SHA1 301edb497f84008b7b63cf3329bcc0c76584a24e
- SHA512 3642494dce4baeb0334cc52ddb71ecb443ffa8853fb667dca6c8da09e172bd4087ef0225973be92e2d652951e291e09ac07474aa1761ee8f46d753789da53078
- SSDEEP 6144:dbxytNBjXQolw9R0N4BV+UdvrEFp7hKMRwO:dbxytN1Qb/0N4BjvrEH7LL
- TLSH T11624C00071C183FAE8721530347CABB199ECE93C0E2A59ABE35915265E7C1D29639F7F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Floxif payload
-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL