General
- Target 2026-08-25_fae961b3401d415dab6e9e9d5353971c_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260826-a3v3fsfp4v
- SHA256 f337e1b1dcdd61e628885e378295d4014f221d808abffa5434095899d0b4c892
- MD5 fae961b3401d415dab6e9e9d5353971c
- SHA1 ede3709307639813817626b7620ebef3ef2adb60
- SHA512 f1aa709ffe6eb6500349e1ad7c5fb69a2dc1cb161b067c39665e1f04775dcec9c92ef6a4bc6bc67eef9b979a29248902ad43c3b3a37fed86c068ca4189ffda57
- SSDEEP 24576:gw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+L9:EKjKWQc2b1FVgbjrjxPe1pbPSQm1Flou
- TLSH T1FD65220572E08074F5F21E30A87096B55BBEFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_fae961b3401d415dab6e9e9d5353971c_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_fae961b3401d415dab6e9e9d5353971c_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 f337e1b1dcdd61e628885e378295d4014f221d808abffa5434095899d0b4c892
- MD5 fae961b3401d415dab6e9e9d5353971c
- SHA1 ede3709307639813817626b7620ebef3ef2adb60
- SHA512 f1aa709ffe6eb6500349e1ad7c5fb69a2dc1cb161b067c39665e1f04775dcec9c92ef6a4bc6bc67eef9b979a29248902ad43c3b3a37fed86c068ca4189ffda57
- SSDEEP 24576:gw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+L9:EKjKWQc2b1FVgbjrjxPe1pbPSQm1Flou
- TLSH T1FD65220572E08074F5F21E30A87096B55BBEFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.