General
- Target 2026-08-06_41fa3f42ae5534021507cadabbcfab05_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260806-dne98sfe56
- SHA256 73c2ac3b7baeabbfe1fb7650a2f0c3332ab5377e117f09fd34e6b327370e91a6
- MD5 41fa3f42ae5534021507cadabbcfab05
- SHA1 3cb4744887dcff7d6367908969bd565561c11460
- SHA512 b60986d55b74965f5c0752cb32ecb9d0b94fcf7ae470308bd4d7c1cbc10cd406c438310df3b5888d692342aecfa1b6d3b3422a10913a431cb9367d302dc9e560
- SSDEEP 24576:tw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+L7:LKjKWQc2b1FVgbjrjxPe1pbPSQm1FloQ
- TLSH T15D65220572E08074F5F21A30A87096B55BBEFD746931AA0B13991F3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_41fa3f42ae5534021507cadabbcfab05_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_41fa3f42ae5534021507cadabbcfab05_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 73c2ac3b7baeabbfe1fb7650a2f0c3332ab5377e117f09fd34e6b327370e91a6
- MD5 41fa3f42ae5534021507cadabbcfab05
- SHA1 3cb4744887dcff7d6367908969bd565561c11460
- SHA512 b60986d55b74965f5c0752cb32ecb9d0b94fcf7ae470308bd4d7c1cbc10cd406c438310df3b5888d692342aecfa1b6d3b3422a10913a431cb9367d302dc9e560
- SSDEEP 24576:tw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+L7:LKjKWQc2b1FVgbjrjxPe1pbPSQm1FloQ
- TLSH T15D65220572E08074F5F21A30A87096B55BBEFD746931AA0B13991F3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.