2026-07-28_93a37de38b8ecf557a08085ec6b14dd3_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-28_93a37de38b8ecf557a08085ec6b14dd3_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader
Size 1.4MB
Sample260728-2fmlcazsey
SHA256 99ae6001f8d71fa92b1a2e391ce460c041db155bc0d0dcccd12d057131e3f371
MD5 93a37de38b8ecf557a08085ec6b14dd3
SHA1 9933f76a7564ebff36114251a6949e7a99b2b9f8
SHA512 3b04747c3cd8bd8bb0a039947119facedc487a9a42460e44a1ab2e8210e8b9467cd139f540d4f568b58405e2e2aa713730beea3d02624e03014ab3131bb60c52
SSDEEP 24576:sxEYmDBYBAfPZ7l12XCHhtGJlouNBjjd7gVIe9Z:sKYmDBDnkyH3uJhjxj4
TLSH
T19F65121438C2C473D8330935AA34DAB2A63DFE741F6091D79788567A9F745D22E30EAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-28_93a37de38b8ecf557a08085ec6b14dd3_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-07-28_93a37de38b8ecf557a08085ec6b14dd3_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader

.exe 1.4MB

2026-07-28_93a37de38b8ecf557a08085ec6b14dd3_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 6e1682269ba9c0854bdf73b7b9809da0
SHA256 99ae6001f8d71fa92b1a2e391ce460c041db155bc0d0dcccd12d057131e3f371
MD5 93a37de38b8ecf557a08085ec6b14dd3
SHA1 9933f76a7564ebff36114251a6949e7a99b2b9f8
SHA512 3b04747c3cd8bd8bb0a039947119facedc487a9a42460e44a1ab2e8210e8b9467cd139f540d4f568b58405e2e2aa713730beea3d02624e03014ab3131bb60c52
SSDEEP 24576:sxEYmDBYBAfPZ7l12XCHhtGJlouNBjjd7gVIe9Z:sKYmDBDnkyH3uJhjxj4
TLSH
T19F65121438C2C473D8330935AA34DAB2A63DFE741F6091D79788567A9F745D22E30EAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Sam\Desktop\Output_SDK\MSI_Central_Service.pdb

kernel32

Sleep CreateThread HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap MultiByteToWideChar WideCharToMultiByte SizeofResource LockResource LoadResource FindResourceW FindResourceExW InitializeCriticalSectionEx Process32Next DecodePointer DeleteCriticalSection IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection CreateFileW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle Process32First CreateToolhelp32Snapshot WaitForSingleObject GetProcessId FindClose FindFirstFileA WriteFile GetLocalTime DeleteFileA CloseHandle GetFileSize GetLastError CreateFileA CreateDirectoryA GetModuleFileNameA RaiseException GetModuleHandleA SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo WriteConsoleW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW GetProcAddress UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle GetCommandLineA GetCommandLineW CompareStringW LCMapStringW GetFileType

user32

GetMessageA PeekMessageA DispatchMessageA DefWindowProcA TranslateMessage CreateWindowExA RegisterClassA

advapi32

SetServiceStatus RegisterServiceCtrlHandlerExA StartServiceA DeleteService QueryServiceStatus ControlService CloseServiceHandle ChangeServiceConfig2A OpenServiceA CreateServiceA OpenSCManagerA StartServiceCtrlDispatcherA RegSetValueExA RegCreateKeyExA RegCloseKey RegOpenKeyExA

ole32

CoInitialize CoInitializeSecurity CoCreateInstance

shell32

ShellExecuteExA

oleaut32

VariantClear VariantInit SysFreeString SysAllocString SysAllocStringLen

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-28_93a37de38b8ecf557a08085ec6b14dd3_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader

kernel32

user32

advapi32

ole32

shell32

oleaut32

generic