General
- Target 2026-09-06_d1af9c73e1f805dba18dc579afbc61e6_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260906-vya7psyfjg
- SHA256 f4e3290f03cacc64976d6fa0b0729f74592952851a9ba27c4aa81b60f7b76d14
- MD5 d1af9c73e1f805dba18dc579afbc61e6
- SHA1 865fb1f9f56db9e071e8c1105e02b4d1f2f36ed3
- SHA512 60d981a65a89c6717badcc9df8816bf68ffed16007e6ecdea66a289e6ea2fb8c0dd6bedc6d1d425a56d849d00299c69502be6bd9a4146439a55d004f020c245d
- SSDEEP 24576:Ks8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Ld:+KjKWQc2b1FVgbjrjxPe1pbPSQm1FloW
- TLSH T18965230572E18074E4F21E30A970DAB15B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_d1af9c73e1f805dba18dc579afbc61e6_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_d1af9c73e1f805dba18dc579afbc61e6_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 f4e3290f03cacc64976d6fa0b0729f74592952851a9ba27c4aa81b60f7b76d14
- MD5 d1af9c73e1f805dba18dc579afbc61e6
- SHA1 865fb1f9f56db9e071e8c1105e02b4d1f2f36ed3
- SHA512 60d981a65a89c6717badcc9df8816bf68ffed16007e6ecdea66a289e6ea2fb8c0dd6bedc6d1d425a56d849d00299c69502be6bd9a4146439a55d004f020c245d
- SSDEEP 24576:Ks8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Ld:+KjKWQc2b1FVgbjrjxPe1pbPSQm1FloW
- TLSH T18965230572E18074E4F21E30A970DAB15B7EFD746931AA0B13991E3D6F38981EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.