General
- Target 2026-07-28_7aa4519fa29270136404b98eb7a197aa_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260728-b5g42sed86
- SHA256 7f1d9e960155ae8407394da019d5876b03bd1af5705892d7f88c4c4644c992bf
- MD5 7aa4519fa29270136404b98eb7a197aa
- SHA1 b2697b36c2c1973cc898ca1eb816f97585c03a50
- SHA512 70fcd86125211569370a0703a1032a92a77d72f6f1bb2316fcf107d8b04539dc2b271f7fce7bb32cd6532ac66202c989b7a7e85d405f51ceeffc2533e873a11a
- SSDEEP 24576:Iw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LX:cKjKWQc2b1FVgbjrjxPe1pbPSQm1FloE
- TLSH T1C465220172E08074F5F21A30A870D6B55BBEFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_7aa4519fa29270136404b98eb7a197aa_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_7aa4519fa29270136404b98eb7a197aa_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 7f1d9e960155ae8407394da019d5876b03bd1af5705892d7f88c4c4644c992bf
- MD5 7aa4519fa29270136404b98eb7a197aa
- SHA1 b2697b36c2c1973cc898ca1eb816f97585c03a50
- SHA512 70fcd86125211569370a0703a1032a92a77d72f6f1bb2316fcf107d8b04539dc2b271f7fce7bb32cd6532ac66202c989b7a7e85d405f51ceeffc2533e873a11a
- SSDEEP 24576:Iw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LX:cKjKWQc2b1FVgbjrjxPe1pbPSQm1FloE
- TLSH T1C465220172E08074F5F21A30A870D6B55BBEFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.