General
- Target 2026-08-19_f570a1db232ffc1d55d1b06575b10782_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260819-mpzvpssbmf
- SHA256 b219c58e4e838e3d54ca8269d4f1845b5f09493238de03bca4bd2212e591f181
- MD5 f570a1db232ffc1d55d1b06575b10782
- SHA1 ea75cd700f73e48c634d7a1e39bf8f799ec0b69c
- SHA512 67f42df25e0eafea3fa0ec88f8b5dbbf866bbdadd83478702a017e84b7709835009b88f4225e173cf213960fde987f98e744e5092f54a7cbefa3fb304a6ffb6d
- SSDEEP 24576:cB8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Li:XKjKWQc2b1FVgbjrjxPe1pbPSQm1FloZ
- TLSH T13765230572E08074E4F22E30A874DAB55B7EFD7469319A0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_f570a1db232ffc1d55d1b06575b10782_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_f570a1db232ffc1d55d1b06575b10782_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 b219c58e4e838e3d54ca8269d4f1845b5f09493238de03bca4bd2212e591f181
- MD5 f570a1db232ffc1d55d1b06575b10782
- SHA1 ea75cd700f73e48c634d7a1e39bf8f799ec0b69c
- SHA512 67f42df25e0eafea3fa0ec88f8b5dbbf866bbdadd83478702a017e84b7709835009b88f4225e173cf213960fde987f98e744e5092f54a7cbefa3fb304a6ffb6d
- SSDEEP 24576:cB8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Li:XKjKWQc2b1FVgbjrjxPe1pbPSQm1FloZ
- TLSH T13765230572E08074E4F22E30A874DAB55B7EFD7469319A0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.