Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/09/2026, 10:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_c5e77c9a8a653c8b650aee1a2904d3ff_amadey_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-09-05_c5e77c9a8a653c8b650aee1a2904d3ff_amadey_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-05_c5e77c9a8a653c8b650aee1a2904d3ff_amadey_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-09-05_c5e77c9a8a653c8b650aee1a2904d3ff_amadey_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar.exe
- Size 11.3MB
- Sample260907-l6331sthjc
- SHA256 45351621cb8a00a53820f1007e93dabb85f6378e476631e9c6e80b38739a118e
- MD5 c5e77c9a8a653c8b650aee1a2904d3ff
- SHA1 e9c256f77e320567507058737e3d714028776501
- SHA512 7d155e78cc77715c6367f9e3dbd4c96a31788fb8261d8358af10f859e0cb16046cc992469b667ffb5fb600ff17e078b0b2f4fb28ecf5e86e2eabe77c359fb4cb
- SSDEEP 196608:tnnKnnnKnnnKnnnKnnnKnnn0KWQc0gEYnvL:acZEIv
- TLSH T130C66C1C67A920D5E9B6813489668266DB30BC35572167FF66D0F23E9F33AC0AC38F15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10