2026-08-02_0d05eef2d3d71c3b85b6b20557409652_amadey_elex_hellokitty_luca-stealer_njrat

General

Target
2026-08-02_0d05eef2d3d71c3b85b6b20557409652_amadey_elex_hellokitty_luca-stealer_njrat
Size 1.6MB
Sample260802-pea5psy1fw
SHA256 b306c05ae710c6f7c6d6698faf06efa2b8d61a4ecc6efdd1e7f14b7814a7f4fc
MD5 0d05eef2d3d71c3b85b6b20557409652
SHA1 85774d7ce7ed9ba6ea9a1bbbf6f9d9202a3176b6
SHA512 c8c54b7bcacd0249d94780bd2999bcbcf67430765f803c7b6913a53b43662e1fc34e00b05f1a67a1165b096304626f8ee77cf2a53e3be2a8fae196c6ddcb57a6
SSDEEP 12288:yDvS/wRaB4L03D+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:yjqgi4gTyxknw4FYnshx8OfVe247
TLSH
T1F975F05875CA8072D475243207739BF21B2DBE705AA2C54FA7C53A2AEA7C4D0F51AB33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_0d05eef2d3d71c3b85b6b20557409652_amadey_elex_hellokitty_luca-stealer_njrat

File Explorer

2026-08-02_0d05eef2d3d71c3b85b6b20557409652_amadey_elex_hellokitty_luca-stealer_njrat

.exe 1.6MB

2026-08-02_0d05eef2d3d71c3b85b6b20557409652_amadey_elex_hellokitty_luca-stealer_njrat

IMPHASH f7365c635306e324116f7095b34719e1
SHA256 b306c05ae710c6f7c6d6698faf06efa2b8d61a4ecc6efdd1e7f14b7814a7f4fc
MD5 0d05eef2d3d71c3b85b6b20557409652
SHA1 85774d7ce7ed9ba6ea9a1bbbf6f9d9202a3176b6
SHA512 c8c54b7bcacd0249d94780bd2999bcbcf67430765f803c7b6913a53b43662e1fc34e00b05f1a67a1165b096304626f8ee77cf2a53e3be2a8fae196c6ddcb57a6
SSDEEP 12288:yDvS/wRaB4L03D+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:yjqgi4gTyxknw4FYnshx8OfVe247
TLSH
T1F975F05875CA8072D475243207739BF21B2DBE705AA2C54FA7C53A2AEA7C4D0F51AB33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7354

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\1\b\bin\win32\venvlauncher.pdb

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

kernel32

WriteConsoleW SetEndOfFile InitializeCriticalSectionAndSpinCount HeapReAlloc GetStartupInfoW SetConsoleCtrlHandler SetInformationJobObject QueryInformationJobObject CompareStringW GetCommandLineW GetCurrentProcess GetStdHandle AssignProcessToJobObject GetModuleFileNameW SetEnvironmentVariableW GetEnvironmentVariableW GetFileAttributesW DuplicateHandle MultiByteToWideChar FormatMessageW GetLastError WaitForSingleObjectEx CloseHandle CreateJobObjectA CreateProcessW GetExitCodeProcess HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetModuleHandleW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW WriteFile GetCommandLineA HeapFree HeapAlloc GetFileType LCMapStringW FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetStringTypeW ReadFile ReadConsoleW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap GetFileSizeEx SetFilePointerEx CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_0d05eef2d3d71c3b85b6b20557409652_amadey_elex_hellokitty_luca-stealer_njrat

version

kernel32

generic