2026-09-26_4fbc144f8d0ec120f6cfb64c786c9bd2_amadey_elex_hellokitty_luca-stealer_lynx_njrat

General

Target
2026-09-26_4fbc144f8d0ec120f6cfb64c786c9bd2_amadey_elex_hellokitty_luca-stealer_lynx_njrat
Size 1.2MB
Sample260926-2ywa7sty2n
SHA256 3a6ec3a53e4e7e11ad964ccca745016254492c6558bbdcac289d9d715b539c15
MD5 4fbc144f8d0ec120f6cfb64c786c9bd2
SHA1 0f5b29fc05a08c56b630a12b3d8a94565df4ea4a
SHA512 a7d1f95e5fe7924a37090d14862abfd0924ab20aa0a2a9157be24558edb9f85545d727c5c6417140eee6293aa3a55b4fc745397e7880e986a60a59c1cfd2a69e
SSDEEP 24576:Muex6YtOUDgF70c9xmQtlX8kA2Mje27Ni1JFbDZ8:Muex6sOUDkzkQtlMBXe27gdbDZ8
TLSH
T19045121135C0C832D67719358A90E7308A7DF9700F6189FB73912B7ACF756D2CA6A93A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-26_4fbc144f8d0ec120f6cfb64c786c9bd2_amadey_elex_hellokitty_luca-stealer_lynx_njrat

File Explorer

2026-09-26_4fbc144f8d0ec120f6cfb64c786c9bd2_amadey_elex_hellokitty_luca-stealer_lynx_njrat

.exe 1.2MB

2026-09-26_4fbc144f8d0ec120f6cfb64c786c9bd2_amadey_elex_hellokitty_luca-stealer_lynx_njrat

IMPHASH e3e9f38319c353ff0336c249f87bdef4
SHA256 3a6ec3a53e4e7e11ad964ccca745016254492c6558bbdcac289d9d715b539c15
MD5 4fbc144f8d0ec120f6cfb64c786c9bd2
SHA1 0f5b29fc05a08c56b630a12b3d8a94565df4ea4a
SHA512 a7d1f95e5fe7924a37090d14862abfd0924ab20aa0a2a9157be24558edb9f85545d727c5c6417140eee6293aa3a55b4fc745397e7880e986a60a59c1cfd2a69e
SSDEEP 24576:Muex6YtOUDgF70c9xmQtlX8kA2Mje27Ni1JFbDZ8:Muex6sOUDkzkQtlMBXe27gdbDZ8
TLSH
T19045121135C0C832D67719358A90E7308A7DF9700F6189FB73912B7ACF756D2CA6A93A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Builds\.tmp\obs\liv-558\build32\plugins\win-capture\get-graphics-offsets\RelWithDebInfo\get-graphics-offsets32.pdb

kernel32

SetErrorMode GetModuleHandleA VerSetConditionMask GetProcAddress LoadLibraryA VerifyVersionInfoW WriteConsoleW CreateFileW CloseHandle HeapReAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize DecodePointer

user32

RegisterClassA DefWindowProcA CreateWindowExA DestroyWindow

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-26_4fbc144f8d0ec120f6cfb64c786c9bd2_amadey_elex_hellokitty_luca-stealer_lynx_njrat

kernel32

user32

generic