General
- Target 2026-07-18_b49351492fffe2da32d6e414cfd9c6a8_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhadamanthys_smoke-loader
- Size 1.7MB
- Sample260718-mlv3cagv4q
- SHA256 0a51cae55aa5e1094caf06568eb6db56098200104cad45290252febbf961562e
- MD5 b49351492fffe2da32d6e414cfd9c6a8
- SHA1 66db05a582c6a24478c2270e96574392e6899cec
- SHA512 79d8ea246b47a8cd5aed21e8060a0ffc0dd71255bbc18f1324eea2871269cabcebfc0aa0e3d37195b19633be01b7b9d4af9f65e9a306284a5430a4d4fa5c7c03
- SSDEEP 24576:jGTjSw8KK/KCtMZd0qg6GTjSw8KK/KCtMZd0qgm:jGT2KK/KCGZd0qg6GT2KK/KCGZd0qgm
- TLSH T14485AF1AF5C140F6E41AC430D66E5635AA36BC7D1BA069EB13C0E7981D33BD0AB38F56
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-18_b49351492fffe2da32d6e414cfd9c6a8_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_b49351492fffe2da32d6e414cfd9c6a8_amadey_cloudeye_elex_hellokitty_luca-stealer_njrat_rhadamanthys_smoke-loader
- Size 1.7MB
- SHA256 0a51cae55aa5e1094caf06568eb6db56098200104cad45290252febbf961562e
- MD5 b49351492fffe2da32d6e414cfd9c6a8
- SHA1 66db05a582c6a24478c2270e96574392e6899cec
- SHA512 79d8ea246b47a8cd5aed21e8060a0ffc0dd71255bbc18f1324eea2871269cabcebfc0aa0e3d37195b19633be01b7b9d4af9f65e9a306284a5430a4d4fa5c7c03
- SSDEEP 24576:jGTjSw8KK/KCtMZd0qg6GTjSw8KK/KCtMZd0qgm:jGT2KK/KCGZd0qg6GT2KK/KCGZd0qgm
- TLSH T14485AF1AF5C140F6E41AC430D66E5635AA36BC7D1BA069EB13C0E7981D33BD0AB38F56
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Shodi worm
-
Executes dropped EXE
-
Drops file in System32 directory