Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/08/2026, 23:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_f8bf0652571ef264e4b7d29574605d16_amadey_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_f8bf0652571ef264e4b7d29574605d16_amadey_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-15_f8bf0652571ef264e4b7d29574605d16_amadey_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-15_f8bf0652571ef264e4b7d29574605d16_amadey_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-15_f8bf0652571ef264e4b7d29574605d16_amadey_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar.exe
- Size 7.3MB
- Sample260815-3pykmsac45
- SHA256 9d269c3997321a1857e2c51816ac7e0e0a0a7fd8dd7059b4405794e3a7bdc63b
- MD5 f8bf0652571ef264e4b7d29574605d16
- SHA1 abcfba95e3d280e0dc96591404275de73c87031b
- SHA512 2ebf5331f2c977a234864612179ed6bb1a3d392a8871e89d96cc53574085d2b053aa2cbb68d34e749cc902d5f35e06fc031878c28fbeb2eb951f8d469fd583d3
- SSDEEP 49152:I+ES+ES+ES+EFiw2F+ES+ES+E7+ES+ES+ES+EFiw2F+ES+ES+E7+ES+ES+ES+EFa:dKjKWQckVgtev5mnlNL
- TLSH T1BC765C09FADA0471E877617048DBD27E8A71B9218732CAEFE649C62F5D33BE06834715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10