General
- Target 2026-08-12_2cfe7aadc32eb45e247eabac0d547565_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260812-eas5lshr6w
- SHA256 19143b5b0864b5476bf0ff76830815f0958f9576948749684a2f6b22a258c69d
- MD5 2cfe7aadc32eb45e247eabac0d547565
- SHA1 f6ab75b3ab7a293cbef1c3bc4a4a4d651b455141
- SHA512 6cd5b161b702c9b522b0efa5e0f5460b2f2b33b959458b502b9d171a1afc9dcb0cc2c20646e7ac62da59bb0eddfb32535edf88800df3f5da39fa922329bf78b1
- SSDEEP 24576:ks8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LK:oKjKWQc2b1FVgbjrjxPe1pbPSQm1Flox
- TLSH T1BD65230172E18074E4F21E30A970D6B55B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_2cfe7aadc32eb45e247eabac0d547565_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_2cfe7aadc32eb45e247eabac0d547565_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 19143b5b0864b5476bf0ff76830815f0958f9576948749684a2f6b22a258c69d
- MD5 2cfe7aadc32eb45e247eabac0d547565
- SHA1 f6ab75b3ab7a293cbef1c3bc4a4a4d651b455141
- SHA512 6cd5b161b702c9b522b0efa5e0f5460b2f2b33b959458b502b9d171a1afc9dcb0cc2c20646e7ac62da59bb0eddfb32535edf88800df3f5da39fa922329bf78b1
- SSDEEP 24576:ks8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LK:oKjKWQc2b1FVgbjrjxPe1pbPSQm1Flox
- TLSH T1BD65230172E18074E4F21E30A970D6B55B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.