General
- Target 2026-07-16_950e5b4eb04e126519f26ab158aee334_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260716-bftrjsds8s
- SHA256 c49cdf570acfecbde8ff39080c1da246180bc3163fbd6b092327ea10e51fbcd0
- MD5 950e5b4eb04e126519f26ab158aee334
- SHA1 03b5ac38f60fc014a359ddf385c4d42731f33fa1
- SHA512 81bd91b8ae97034eaf76b9d792d7f74b6d8a8bbedecc73ff6a94e85f50742afe6825d8184eadfd36f4fda1876b0ad8a09158afc70c406662328f1991d3fbd0d6
- SSDEEP 24576:ys8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LT:GKjKWQc2b1FVgbjrjxPe1pbPSQm1Flos
- TLSH T15065230572E18074E4F21E30A970DAB54B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_950e5b4eb04e126519f26ab158aee334_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_950e5b4eb04e126519f26ab158aee334_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_950e5b4eb04e126519f26ab158aee334_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 c49cdf570acfecbde8ff39080c1da246180bc3163fbd6b092327ea10e51fbcd0
- MD5 950e5b4eb04e126519f26ab158aee334
- SHA1 03b5ac38f60fc014a359ddf385c4d42731f33fa1
- SHA512 81bd91b8ae97034eaf76b9d792d7f74b6d8a8bbedecc73ff6a94e85f50742afe6825d8184eadfd36f4fda1876b0ad8a09158afc70c406662328f1991d3fbd0d6
- SSDEEP 24576:ys8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LT:GKjKWQc2b1FVgbjrjxPe1pbPSQm1Flos
- TLSH T15065230572E18074E4F21E30A970DAB54B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.