General
- Target 2026-10-26_fd52a0cec69b33fd3dfc90bb5b7ddfca_amadey_elex_hellokitty_karagany_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 54.9MB
- Sample261027-bf4azshx2s
- SHA256 47398d02041a13233afab494eebd3e99545f98ec3776c92313539b36d6364792
- MD5 fd52a0cec69b33fd3dfc90bb5b7ddfca
- SHA1 8e0c46c1951e665a4ae481fdbc58c157f5b64291
- SHA512 1452505fd9f75b0f235f59fe9b9661e8c0a9e6c836715aa93a90f05d543e6657ae8363a95672271465d557663ab8e9918aa95f13eaa26584c75000cd550733af
- SSDEEP 1572864:9AwN7MzDaWymAcrQj1Po1DhW7bs5tbbsOPPBOIwi:9vMzDSm/rQjFUW/Ib3nwi
- TLSH T165C733416284E038E68101381AEB06FB6F3BBCB4E75249E31BDD7A597C446D395373AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_fd52a0cec69b33fd3dfc90bb5b7ddfca_amadey_elex_hellokitty_karagany_luca-stealer_njrat_redli.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_fd52a0cec69b33fd3dfc90bb5b7ddfca_amadey_elex_hellokitty_karagany_luca-stealer_njrat_redli.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_fd52a0cec69b33fd3dfc90bb5b7ddfca_amadey_elex_hellokitty_karagany_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 54.9MB
- SHA256 47398d02041a13233afab494eebd3e99545f98ec3776c92313539b36d6364792
- MD5 fd52a0cec69b33fd3dfc90bb5b7ddfca
- SHA1 8e0c46c1951e665a4ae481fdbc58c157f5b64291
- SHA512 1452505fd9f75b0f235f59fe9b9661e8c0a9e6c836715aa93a90f05d543e6657ae8363a95672271465d557663ab8e9918aa95f13eaa26584c75000cd550733af
- SSDEEP 1572864:9AwN7MzDaWymAcrQj1Po1DhW7bs5tbbsOPPBOIwi:9vMzDSm/rQjFUW/Ib3nwi
- TLSH T165C733416284E038E68101381AEB06FB6F3BBCB4E75249E31BDD7A597C446D395373AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.