2026-08-06_d8ce9f1d8ee1e0847496f90af633bc8d_amadey_elex_hellokitty_luca-stealer_lynx_njrat

General

Target
2026-08-06_d8ce9f1d8ee1e0847496f90af633bc8d_amadey_elex_hellokitty_luca-stealer_lynx_njrat
Size 1.5MB
Sample260806-lr81qahk21
SHA256 029a70b58dd8929ada3e2cbc627f65f12ab6f1bf09dd04b66f393a9eed065226
MD5 d8ce9f1d8ee1e0847496f90af633bc8d
SHA1 7cbbeec38c6cafd34b258f1e9f6fd8d4ced9eafd
SHA512 984a8a9807d7b7fa1cc4bf7df9460cb0914fd8fae6c18c8ff644ba0580a2df198b891b68c535462700bad1cc92b216fbd76e4a8562e4f207180c54c3f4e2c822
SSDEEP 24576:Huex6umb57GBiOl6a8JTth/RWZvR6wQQ92pN3L:Huex6Rb5+Pl6bJTIZ5jdgpN
TLSH
T1BD75120176C1D072D5B71A3588D4DB60EE7DFE308E556AFB43A8097BAF303C16926A1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-06_d8ce9f1d8ee1e0847496f90af633bc8d_amadey_elex_hellokitty_luca-stealer_lynx_njrat

File Explorer

2026-08-06_d8ce9f1d8ee1e0847496f90af633bc8d_amadey_elex_hellokitty_luca-stealer_lynx_njrat

.exe 1.5MB

2026-08-06_d8ce9f1d8ee1e0847496f90af633bc8d_amadey_elex_hellokitty_luca-stealer_lynx_njrat

IMPHASH e3e9f38319c353ff0336c249f87bdef4
SHA256 029a70b58dd8929ada3e2cbc627f65f12ab6f1bf09dd04b66f393a9eed065226
MD5 d8ce9f1d8ee1e0847496f90af633bc8d
SHA1 7cbbeec38c6cafd34b258f1e9f6fd8d4ced9eafd
SHA512 984a8a9807d7b7fa1cc4bf7df9460cb0914fd8fae6c18c8ff644ba0580a2df198b891b68c535462700bad1cc92b216fbd76e4a8562e4f207180c54c3f4e2c822
SSDEEP 24576:Huex6umb57GBiOl6a8JTth/RWZvR6wQQ92pN3L:Huex6Rb5+Pl6bJTIZ5jdgpN
TLSH
T1BD75120176C1D072D5B71A3588D4DB60EE7DFE308E556AFB43A8097BAF303C16926A1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Builds\.tmp\obs\liv-558\build32\plugins\win-capture\get-graphics-offsets\RelWithDebInfo\get-graphics-offsets32.pdb

kernel32

SetErrorMode GetModuleHandleA VerSetConditionMask GetProcAddress LoadLibraryA VerifyVersionInfoW WriteConsoleW CreateFileW CloseHandle HeapReAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize DecodePointer

user32

RegisterClassA DefWindowProcA CreateWindowExA DestroyWindow

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_d8ce9f1d8ee1e0847496f90af633bc8d_amadey_elex_hellokitty_luca-stealer_lynx_njrat

kernel32

user32

generic