General
- Target 2026-08-16_c1a73be41734055bbbd227bbcd6e0c47_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260816-ca3b6sbl31
- SHA256 dc5b557b7bd4d6598b38677510ac8c57bf6b7d07b96a5ce9370d526c0f0f7c4e
- MD5 c1a73be41734055bbbd227bbcd6e0c47
- SHA1 9d66857ee08be5431cfeccfaef0bb32557bc85b6
- SHA512 1a8bc86940eed35dea61ea409535d6efa9f6ecf686de01713c00f17eb8044cd3418fa1b979a0ece3adf3828d0d9275b1ffdf2586716692c85330cba19b8410dc
- SSDEEP 24576:xw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lv:nKjKWQc2b1FVgbjrjxPe1pbPSQm1FloE
- TLSH T1C065220172E08074F5F21E30A87196B55BBEFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_c1a73be41734055bbbd227bbcd6e0c47_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_c1a73be41734055bbbd227bbcd6e0c47_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 dc5b557b7bd4d6598b38677510ac8c57bf6b7d07b96a5ce9370d526c0f0f7c4e
- MD5 c1a73be41734055bbbd227bbcd6e0c47
- SHA1 9d66857ee08be5431cfeccfaef0bb32557bc85b6
- SHA512 1a8bc86940eed35dea61ea409535d6efa9f6ecf686de01713c00f17eb8044cd3418fa1b979a0ece3adf3828d0d9275b1ffdf2586716692c85330cba19b8410dc
- SSDEEP 24576:xw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lv:nKjKWQc2b1FVgbjrjxPe1pbPSQm1FloE
- TLSH T1C065220172E08074F5F21E30A87196B55BBEFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.