General
- Target 2026-08-12_6f035054a0ea0cbf148977f37186a0c0_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260812-e6dd2avzfz
- SHA256 e58ce6195c5ce03e81036bbf51d00452912c817583a1dca3cbbc5230111755b6
- MD5 6f035054a0ea0cbf148977f37186a0c0
- SHA1 94c965a2ff3b580737d8d85851aae24de91b206f
- SHA512 40b39f83d0ea929697fb81c639c066b8202614d00a0c21dcfce5f84a7423bf6e647aa1951fa140d48d1ce943414acf33f2aa41b77503ea9454e9fd1e76845502
- SSDEEP 24576:bw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LK:tKjKWQc2b1FVgbjrjxPe1pbPSQm1FloF
- TLSH T14D65220172E08074F5F21A30A97096B55BBEFD746931AA0B13991F3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_6f035054a0ea0cbf148977f37186a0c0_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_6f035054a0ea0cbf148977f37186a0c0_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 e58ce6195c5ce03e81036bbf51d00452912c817583a1dca3cbbc5230111755b6
- MD5 6f035054a0ea0cbf148977f37186a0c0
- SHA1 94c965a2ff3b580737d8d85851aae24de91b206f
- SHA512 40b39f83d0ea929697fb81c639c066b8202614d00a0c21dcfce5f84a7423bf6e647aa1951fa140d48d1ce943414acf33f2aa41b77503ea9454e9fd1e76845502
- SSDEEP 24576:bw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LK:tKjKWQc2b1FVgbjrjxPe1pbPSQm1FloF
- TLSH T14D65220172E08074F5F21A30A97096B55BBEFD746931AA0B13991F3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.