General
- Target 2026-08-12_7509e310ff61978f4767c3b513cc8589_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260812-d589msac82
- SHA256 5d386482591bc12676be68f8a37baf2ddb6f310d8def6b8fa302405f7f517e86
- MD5 7509e310ff61978f4767c3b513cc8589
- SHA1 4c586f9e453bfff49b2708ea36ac9e1703a4f8ba
- SHA512 62f9285659bce3510c75a414f9ba585ddaabfda2db56a8e5e2818dc7e781f8b5c41d6962ea4f9441c5fc2408f128b5f95a8599cdf9df9dff2f541fa27e37f7b5
- SSDEEP 24576:Yw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lg:MKjKWQc2b1FVgbjrjxPe1pbPSQm1FloD
- TLSH T11565220172E08074F5B21E30A97096B55BBEFD746931AA0B13991F3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_7509e310ff61978f4767c3b513cc8589_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_7509e310ff61978f4767c3b513cc8589_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 5d386482591bc12676be68f8a37baf2ddb6f310d8def6b8fa302405f7f517e86
- MD5 7509e310ff61978f4767c3b513cc8589
- SHA1 4c586f9e453bfff49b2708ea36ac9e1703a4f8ba
- SHA512 62f9285659bce3510c75a414f9ba585ddaabfda2db56a8e5e2818dc7e781f8b5c41d6962ea4f9441c5fc2408f128b5f95a8599cdf9df9dff2f541fa27e37f7b5
- SSDEEP 24576:Yw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lg:MKjKWQc2b1FVgbjrjxPe1pbPSQm1FloD
- TLSH T11565220172E08074F5B21E30A97096B55BBEFD746931AA0B13991F3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.