General
- Target 2026-08-10_2e147d0ca4343da8f1a151287f630fa8_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260810-bcsebagm8z
- SHA256 0fcba98d08d73307b0f7bb61b13cb38441875e6044e1d89885bb7a5c1e2d4d21
- MD5 2e147d0ca4343da8f1a151287f630fa8
- SHA1 b73e12385aa49603bbb40174eeaf854d467b5078
- SHA512 82ab1a1c87fcbedfa12910d0a33ac292231a524bdcb5873f2c5e4441e2fc9936bc521b3dbaab30651367a881b759142797d52e6b4e140db7d9c86ae00c5b2f30
- SSDEEP 24576:fw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Le:pKjKWQc2b1FVgbjrjxPe1pbPSQm1FloJ
- TLSH T1E865220172E08074F5F21A30A97096B55BBEFD746931AA0B13991F3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_2e147d0ca4343da8f1a151287f630fa8_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_2e147d0ca4343da8f1a151287f630fa8_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 0fcba98d08d73307b0f7bb61b13cb38441875e6044e1d89885bb7a5c1e2d4d21
- MD5 2e147d0ca4343da8f1a151287f630fa8
- SHA1 b73e12385aa49603bbb40174eeaf854d467b5078
- SHA512 82ab1a1c87fcbedfa12910d0a33ac292231a524bdcb5873f2c5e4441e2fc9936bc521b3dbaab30651367a881b759142797d52e6b4e140db7d9c86ae00c5b2f30
- SSDEEP 24576:fw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Le:pKjKWQc2b1FVgbjrjxPe1pbPSQm1FloJ
- TLSH T1E865220172E08074F5F21A30A97096B55BBEFD746931AA0B13991F3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.