General
- Target 2026-08-13_0892259f99e386ddacf7644fb34f5cc2_amadey_cloudeye_elex_hellokitty_hijackloader_luca-stealer_njrat_rhadamanthys_smoke-loader
- Size 1.5MB
- Sample260813-xcfamsch27
- SHA256 c3cdf0046552d1fbb7d0db6d8dad9452232e656fe35fad66840f4b979cc5512c
- MD5 0892259f99e386ddacf7644fb34f5cc2
- SHA1 5565ec10c083cdc3a890526577842bcdb873cfa7
- SHA512 4c97206389f54075f9fda21ea10070ae239fcea6dee23d17a49351065d97105af7b8546f966c179dc0e3c8d02ab50b99760db69012761742aef9a8248d47e2aa
- SSDEEP 24576:IGTjSw8KH/B1TjszncGTjSw8KH/B1TjsznN:IGT2K51T4cGT2K51T4N
- TLSH T1CB654B02FBC0E533E56E0A3058B9C7696B75FCA62F528B4B2340B3AC6E313519D2565F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_0892259f99e386ddacf7644fb34f5cc2_amadey_cloudeye_elex_hellokitty_hijackloader_luca-steale.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_0892259f99e386ddacf7644fb34f5cc2_amadey_cloudeye_elex_hellokitty_hijackloader_luca-stealer_njrat_rhadamanthys_smoke-loader
- Size 1.5MB
- SHA256 c3cdf0046552d1fbb7d0db6d8dad9452232e656fe35fad66840f4b979cc5512c
- MD5 0892259f99e386ddacf7644fb34f5cc2
- SHA1 5565ec10c083cdc3a890526577842bcdb873cfa7
- SHA512 4c97206389f54075f9fda21ea10070ae239fcea6dee23d17a49351065d97105af7b8546f966c179dc0e3c8d02ab50b99760db69012761742aef9a8248d47e2aa
- SSDEEP 24576:IGTjSw8KH/B1TjszncGTjSw8KH/B1TjsznN:IGT2K51T4cGT2K51T4N
- TLSH T1CB654B02FBC0E533E56E0A3058B9C7696B75FCA62F528B4B2340B3AC6E313519D2565F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Shodi worm
-
Executes dropped EXE
-
Drops file in System32 directory