General
- Target 2026-07-23_460d24e6572e45c8b0a5a5686a4ebffa_amadey_elex_hellokitty_luca-stealer_njrat_remcos_smoke-loader_swisyn
- Size 301KB
- Sample260723-bqdhbayfjf
- SHA256 60c3b88f7989dd87dded247331910ed9572af3e5c535ecc9d04ea571ba4851ad
- MD5 460d24e6572e45c8b0a5a5686a4ebffa
- SHA1 d21543eff609e2a846185659a617d505646f0a8d
- SHA512 98dc63ad3fa2dbee38596a287d249d4c8982c33311bd504611d3dd94ca949c622d09a8037ecf416d9bf5976d9668c7497055b12cce0248610d44e3a1b97bae3b
- SSDEEP 6144:XsLqdufVUNDan5yO6iAsDo6K0N1Ps2rQcyGk5s7mHZ:cFUNDa5iLsDo6KUPOVhAmHZ
- TLSH T11D645C223AE08836D4B35EB018B5D6757A3ABD315F70DD4F239867181A70683B6F472B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_460d24e6572e45c8b0a5a5686a4ebffa_amadey_elex_hellokitty_luca-stealer_njrat_remcos_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_460d24e6572e45c8b0a5a5686a4ebffa_amadey_elex_hellokitty_luca-stealer_njrat_remcos_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_460d24e6572e45c8b0a5a5686a4ebffa_amadey_elex_hellokitty_luca-stealer_njrat_remcos_smoke-loader_swisyn
- Size 301KB
- SHA256 60c3b88f7989dd87dded247331910ed9572af3e5c535ecc9d04ea571ba4851ad
- MD5 460d24e6572e45c8b0a5a5686a4ebffa
- SHA1 d21543eff609e2a846185659a617d505646f0a8d
- SHA512 98dc63ad3fa2dbee38596a287d249d4c8982c33311bd504611d3dd94ca949c622d09a8037ecf416d9bf5976d9668c7497055b12cce0248610d44e3a1b97bae3b
- SSDEEP 6144:XsLqdufVUNDan5yO6iAsDo6K0N1Ps2rQcyGk5s7mHZ:cFUNDa5iLsDo6KUPOVhAmHZ
- TLSH T11D645C223AE08836D4B35EB018B5D6757A3ABD315F70DD4F239867181A70683B6F472B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of hidden/system files in Explorer
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory