General
- Target 2026-08-20_aa666765cc9c546aec15d2b6e3745f0b_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260820-eaexzsek2y
- SHA256 aff57f865896bedda102cb26e95ad6487107ed36fe5320c5d9734b8edb612bf2
- MD5 aa666765cc9c546aec15d2b6e3745f0b
- SHA1 b9cb6c208cf8cdec4f7e98f10d2ffaf29cc63104
- SHA512 e6aba025e9a36d9001d7f7fa9c5deab1c16f51a170121a1a5c3307ebbe0caa6dab09ae5c95f36a395b6ab09d1974597a6fae249011629f89a28f9827975b6b6b
- SSDEEP 24576:Ts8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lg:RKjKWQc2b1FVgbjrjxPe1pbPSQm1Flov
- TLSH T10865230172E18074E4F21E30A970DAB55B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_aa666765cc9c546aec15d2b6e3745f0b_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_aa666765cc9c546aec15d2b6e3745f0b_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 aff57f865896bedda102cb26e95ad6487107ed36fe5320c5d9734b8edb612bf2
- MD5 aa666765cc9c546aec15d2b6e3745f0b
- SHA1 b9cb6c208cf8cdec4f7e98f10d2ffaf29cc63104
- SHA512 e6aba025e9a36d9001d7f7fa9c5deab1c16f51a170121a1a5c3307ebbe0caa6dab09ae5c95f36a395b6ab09d1974597a6fae249011629f89a28f9827975b6b6b
- SSDEEP 24576:Ts8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lg:RKjKWQc2b1FVgbjrjxPe1pbPSQm1Flov
- TLSH T10865230172E18074E4F21E30A970DAB55B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.