General
- Target 2026-07-27_d774e27eabe1c0166f7ff432da412171_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260727-bqnchstfkg
- SHA256 60a63588f18c8dd954ac145d0601fed309f683f57ab7dd3be536c543c94ec669
- MD5 d774e27eabe1c0166f7ff432da412171
- SHA1 cfa460a3563fa460641a8c605b26165771e59763
- SHA512 1a8cac9008fbf3390d7875d9b9935c529d1e5eb3ff85ee131a6e01eb81f62e67ebbf41dc370da505fc0ecc1733e0455e5f5393aa29238ca3b6e236f48d40267b
- SSDEEP 24576:+s8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lm:KKjKWQc2b1FVgbjrjxPe1pbPSQm1FloB
- TLSH T13F65230572E18074E4F21E30A970D6B15B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_d774e27eabe1c0166f7ff432da412171_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_d774e27eabe1c0166f7ff432da412171_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 60a63588f18c8dd954ac145d0601fed309f683f57ab7dd3be536c543c94ec669
- MD5 d774e27eabe1c0166f7ff432da412171
- SHA1 cfa460a3563fa460641a8c605b26165771e59763
- SHA512 1a8cac9008fbf3390d7875d9b9935c529d1e5eb3ff85ee131a6e01eb81f62e67ebbf41dc370da505fc0ecc1733e0455e5f5393aa29238ca3b6e236f48d40267b
- SSDEEP 24576:+s8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lm:KKjKWQc2b1FVgbjrjxPe1pbPSQm1FloB
- TLSH T13F65230572E18074E4F21E30A970D6B15B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.