2026-09-10_a7ec57c4a80872b784fb780ce032340d_amadey_elex_hellokitty_luca-stealer_njrat_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-10_a7ec57c4a80872b784fb780ce032340d_amadey_elex_hellokitty_luca-stealer_njrat_remcos
Size 51.6MB
Sample260910-pmkn4swycs
SHA256 229c06b985b1033a5c3737bdcbb83dd33fa9ccbfaf47d35c10b2f8980d444bb2
MD5 a7ec57c4a80872b784fb780ce032340d
SHA1 ae1cc7a0bf393e682ebdbf727c5fdb61bc0d518c
SHA512 4026dda67bc1789901850c125c51b45a8fd8cfd8e1d29bfff63d04fa8f1e564ad2f49e4103a932434cd466ee071b01c8d3ac7fc2b232d208bc76b8cd84fe1e3f
SSDEEP 786432:Cz4rE3ZObqzz2kxgfRZQbAjdGNOmGCDGo+XyhydA1cM2YkQOgUFw:s4o3Z72kxSZe2sNxxayhyil2Ykgy
TLSH
T1A2C7DFA3D0134B14EBD60A7ADAD138041D98B01EFFA869EF354C9C85E2A37C176B17B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-10_a7ec57c4a80872b784fb780ce032340d_amadey_elex_hellokitty_luca-stealer_njrat_remcos

File Explorer

2026-09-10_a7ec57c4a80872b784fb780ce032340d_amadey_elex_hellokitty_luca-stealer_njrat_remcos

.exe 51.6MB

2026-09-10_a7ec57c4a80872b784fb780ce032340d_amadey_elex_hellokitty_luca-stealer_njrat_remcos

IMPHASH 4c32c33921c9ebb70af3524830b020b9
SHA256 229c06b985b1033a5c3737bdcbb83dd33fa9ccbfaf47d35c10b2f8980d444bb2
MD5 a7ec57c4a80872b784fb780ce032340d
SHA1 ae1cc7a0bf393e682ebdbf727c5fdb61bc0d518c
SHA512 4026dda67bc1789901850c125c51b45a8fd8cfd8e1d29bfff63d04fa8f1e564ad2f49e4103a932434cd466ee071b01c8d3ac7fc2b232d208bc76b8cd84fe1e3f
SSDEEP 786432:Cz4rE3ZObqzz2kxgfRZQbAjdGNOmGCDGo+XyhydA1cM2YkQOgUFw:s4o3Z72kxSZe2sNxxayhyil2Ykgy
TLSH
T1A2C7DFA3D0134B14EBD60A7ADAD138041D98B01EFFA869EF354C9C85E2A37C176B17B5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

247724

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\User\source\repos\solaris\Debug\solaris.pdb

kernel32

CreateFileW WriteFile GetTempPathW CloseHandle Sleep ExitProcess CreateThread CreateProcessW GetModuleHandleW LoadResource LockResource SizeofResource FindResourceW lstrcpyW lstrcatW FreeConsole DecodePointer ReadConsoleW ReadFile GetCurrentThreadId IsDebuggerPresent RaiseException MultiByteToWideChar WideCharToMultiByte QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetLastError HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary GetProcAddress IsProcessorFeaturePresent InterlockedPushEntrySList InterlockedFlushSList GetModuleFileNameW LoadLibraryExW RtlUnwind SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer GetStdHandle GetCurrentProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW UnhandledExceptionFilter WaitForSingleObject GetExitCodeProcess GetFileAttributesExW GetCurrentThread OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsThreadAFiber VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW SetConsoleCtrlHandler GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode WriteConsoleW

user32

MessageBoxW

Name

.textbss

Size

Virtual Size

230KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

506KB

Virtual Size

505KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

449B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

409B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

51.0MB

Virtual Size

51.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

61KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-10_a7ec57c4a80872b784fb780ce032340d_amadey_elex_hellokitty_luca-stealer_njrat_remcos

kernel32

user32

generic