2026-08-18_5c65203eb0c2c71d83c08a6cf6cecfb6_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader_vidar

General

Target
2026-08-18_5c65203eb0c2c71d83c08a6cf6cecfb6_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader_vidar
Size 1.8MB
Sample260818-wftf1aae92
SHA256 efdb7c304c851b512da83ef991d026aa8d7b7f53a9d3d3dbb66a1f258bd813fe
MD5 5c65203eb0c2c71d83c08a6cf6cecfb6
SHA1 6b381b51a66fd1b200e47321eb9dfe1dfa967f6e
SHA512 69ede512f8fceaafa622724104527b3808d0516f4fc2c0ec3507ad677057570aa1ba706f687090351c8da0e1bf8e3ee65b4f5dc2d1d906a4b3db7a47a3ae705b
SSDEEP 49152:rKjKWQc2w+EF+EF+EF+EKKjKWQc2w+EF+EF+EF+EKKjKWQc2VhOl:rKjKWQc+KjKWQc+KjKWQc4g
TLSH
T1E395AF09F5C340B1D93755704C97D27A8A31FA3547218EABE789CA3FAE33B90A434B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-18_5c65203eb0c2c71d83c08a6cf6cecfb6_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader_vidar

File Explorer

2026-08-18_5c65203eb0c2c71d83c08a6cf6cecfb6_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader_vidar

.exe 1.8MB

2026-08-18_5c65203eb0c2c71d83c08a6cf6cecfb6_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader_vidar

SHA256 efdb7c304c851b512da83ef991d026aa8d7b7f53a9d3d3dbb66a1f258bd813fe
MD5 5c65203eb0c2c71d83c08a6cf6cecfb6
SHA1 6b381b51a66fd1b200e47321eb9dfe1dfa967f6e
SHA512 69ede512f8fceaafa622724104527b3808d0516f4fc2c0ec3507ad677057570aa1ba706f687090351c8da0e1bf8e3ee65b4f5dc2d1d906a4b3db7a47a3ae705b
SSDEEP 49152:rKjKWQc2w+EF+EF+EF+EKKjKWQc2w+EF+EF+EF+EKKjKWQc2VhOl:rKjKWQc+KjKWQc+KjKWQc4g
TLSH
T1E395AF09F5C340B1D93755704C97D27A8A31FA3547218EABE789CA3FAE33B90A434B56
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

0

Entry point

6795

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

797KB

Virtual Size

796KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

PAGER32C

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

PAGE

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

74KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

290KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-18_5c65203eb0c2c71d83c08a6cf6cecfb6_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader_vidar

generic