2026-09-29_105780ec96333d0e562d2a208504fcd3_amadey_elex_hellokitty_luca-stealer_njrat_remcos_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_105780ec96333d0e562d2a208504fcd3_amadey_elex_hellokitty_luca-stealer_njrat_remcos_smoke-loader
Size 2.7MB
Sample260930-3zfsksty7k
SHA256 d0b8ba5c8d40a181f8681083fb52a6d6701177578e2e8b241cba04d5cc6437e7
MD5 105780ec96333d0e562d2a208504fcd3
SHA1 1f7b338294717ecd1edc3668b10b7b191385c478
SHA512 832f3cd9e8769d7f74bed2110cf864577601f128ea8aa18d100a4c582579b64281269d1f3e4a702af589111fcc846ec33f710f4c24e9c6c1ec3eaa5a7736993e
SSDEEP 49152:QTZk4xwk3RfyQGx4uynr9T9M56VTgSYVM0R4KbV7xa/FW8yRXMlR/rK6CIOEaMOD:QTZHwkh63ylVTbv0RrlM/QvR4TjCIJOD
TLSH
T11ED53305F9D0C4B2E6779E3545B8EAB2086DBCB90FA11DC7778066784F22AD06323B57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_105780ec96333d0e562d2a208504fcd3_amadey_elex_hellokitty_luca-stealer_njrat_remcos_smoke-loader

File Explorer

2026-09-29_105780ec96333d0e562d2a208504fcd3_amadey_elex_hellokitty_luca-stealer_njrat_remcos_smoke-loader

.exe 2.7MB

2026-09-29_105780ec96333d0e562d2a208504fcd3_amadey_elex_hellokitty_luca-stealer_njrat_remcos_smoke-loader

IMPHASH 0f4742d118353293dc95de23c61419c2
SHA256 d0b8ba5c8d40a181f8681083fb52a6d6701177578e2e8b241cba04d5cc6437e7
MD5 105780ec96333d0e562d2a208504fcd3
SHA1 1f7b338294717ecd1edc3668b10b7b191385c478
SHA512 832f3cd9e8769d7f74bed2110cf864577601f128ea8aa18d100a4c582579b64281269d1f3e4a702af589111fcc846ec33f710f4c24e9c6c1ec3eaa5a7736993e
SSDEEP 49152:QTZk4xwk3RfyQGx4uynr9T9M56VTgSYVM0R4KbV7xa/FW8yRXMlR/rK6CIOEaMOD:QTZHwkh63ylVTbv0RrlM/QvR4TjCIJOD
TLSH
T11ED53305F9D0C4B2E6779E3545B8EAB2086DBCB90FA11DC7778066784F22AD06323B57
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34116

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\autobuild-components-v5\workspace\360pic\360pic\Release\360hb_inst.pdb

kernel32

CloseHandle WriteFile OutputDebugStringW GetLocalTime ExitProcess GetModuleFileNameW SetFilePointer CreateFileW GetCurrentProcessId CreateDirectoryW SetErrorMode GetTempPathW FindFirstFileW lstrcmpW DeleteFileW GetLastError FindNextFileW FindClose RemoveDirectoryW InitializeCriticalSectionAndSpinCount MultiByteToWideChar RaiseException DecodePointer DeleteCriticalSection GetModuleHandleW FindResourceW LoadResource FreeResource SizeofResource LockResource WaitForSingleObject ReadFile SetFileTime GetFileAttributesW LocalFileTimeToFileTime GetCurrentDirectoryW SystemTimeToFileTime WideCharToMultiByte FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP GetStringTypeW SetStdHandle GetProcessHeap FreeEnvironmentStringsW IsDebuggerPresent EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetModuleHandleExW GetStdHandle GetACP HeapFree HeapAlloc GetFileType HeapSize HeapReAlloc LCMapStringW FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW WriteConsoleW

user32

wsprintfW

shell32

ShellExecuteExW

shlwapi

SHGetValueW PathFileExistsW

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_105780ec96333d0e562d2a208504fcd3_amadey_elex_hellokitty_luca-stealer_njrat_remcos_smoke-loader

kernel32

user32

shell32

shlwapi

version

generic