General
- Target 2026-07-18_895d1ba5292f8340cdfea19f9558ff7a_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn
- Size 271KB
- Sample260718-ba5lvsa17j
- SHA256 e24e19c3b1cb402d5b8e5cb89d5c6b0e82d11442695ced07c48690411341fb52
- MD5 895d1ba5292f8340cdfea19f9558ff7a
- SHA1 a27328a8e44af58dbfc6a54c810312a62d6ac8e9
- SHA512 69885e1ea958d4d502f0ff9817bdf679da6286f6d902d309f7213d143774f8c0ee6866555b14e5fe361080800a4b678f22d3f8a25ba59c486d1671372289beac
- SSDEEP 6144:UsLqdufVUNDa+q246uthVoGnIecVsFsbf:PFUNDa646utjoZlVIsbf
- TLSH T192447C237D80807BD86289F128B0D77AB975FE350FA0AD5733646B282A7518376F461F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_895d1ba5292f8340cdfea19f9558ff7a_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_895d1ba5292f8340cdfea19f9558ff7a_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260710-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_895d1ba5292f8340cdfea19f9558ff7a_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn
- Size 271KB
- SHA256 e24e19c3b1cb402d5b8e5cb89d5c6b0e82d11442695ced07c48690411341fb52
- MD5 895d1ba5292f8340cdfea19f9558ff7a
- SHA1 a27328a8e44af58dbfc6a54c810312a62d6ac8e9
- SHA512 69885e1ea958d4d502f0ff9817bdf679da6286f6d902d309f7213d143774f8c0ee6866555b14e5fe361080800a4b678f22d3f8a25ba59c486d1671372289beac
- SSDEEP 6144:UsLqdufVUNDa+q246uthVoGnIecVsFsbf:PFUNDa646utjoZlVIsbf
- TLSH T192447C237D80807BD86289F128B0D77AB975FE350FA0AD5733646B282A7518376F461F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2