General
- Target 2026-08-22_572ea4dee9b531bf7d01cc4ee0638cdd_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260822-ewpdjs1bpg
- SHA256 efabf3cba25b2912ee2876bb7f47c77a552c83fc5760da8a06c35b06c56b4ffe
- MD5 572ea4dee9b531bf7d01cc4ee0638cdd
- SHA1 a98f50f5530a195069135730379133657841f600
- SHA512 3e38ecbb5f66f27ea08dc76eb5532bf3264b595a5ff5e524e40b1dd8f2a893549a35b76362f2461b5b54bf6964cf70debf18edcea7be5cc450d0cc59eff8477d
- SSDEEP 24576:es8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LD:qKjKWQc2b1FVgbjrjxPe1pbPSQm1Flok
- TLSH T19565230172E18074E5F21E30A970DAB15B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_572ea4dee9b531bf7d01cc4ee0638cdd_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_572ea4dee9b531bf7d01cc4ee0638cdd_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 efabf3cba25b2912ee2876bb7f47c77a552c83fc5760da8a06c35b06c56b4ffe
- MD5 572ea4dee9b531bf7d01cc4ee0638cdd
- SHA1 a98f50f5530a195069135730379133657841f600
- SHA512 3e38ecbb5f66f27ea08dc76eb5532bf3264b595a5ff5e524e40b1dd8f2a893549a35b76362f2461b5b54bf6964cf70debf18edcea7be5cc450d0cc59eff8477d
- SSDEEP 24576:es8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LD:qKjKWQc2b1FVgbjrjxPe1pbPSQm1Flok
- TLSH T19565230172E18074E5F21E30A970DAB15B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.