2026-11-01_a580f5083fabf58f3e8221138d556fba_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_a580f5083fabf58f3e8221138d556fba_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader
Size 1.5MB
Sample261102-py3ztswt7q
SHA256 19e1dd07c8cce07fa32b31819997d269cb4d6f61dad5511fea95c05d30707dff
MD5 a580f5083fabf58f3e8221138d556fba
SHA1 6d96a227e326b7d36bbdeaced218603509c40d7b
SHA512 78942dea48850c8f76b93d8d9bc20a13adda0347c870405abf4e3285d7cba59417f3611660659ff901de2576b4dec26f77b0bbc692595c2ff64fa54a2d153de8
SSDEEP 24576:Ay36GYRMFeYArgEhzZjCzjsA0HkWfwB5y7N51fhOB95Dr47iJ0nQZo2vI3:D6gFeRgUzejAkW4B5yh5phOlciSexvI
TLSH
T1CB7523043AC1C072E2B289350E96DE364C7EFD704E446F67B780AA3DEF345D1962966B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_a580f5083fabf58f3e8221138d556fba_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader

File Explorer

2026-11-01_a580f5083fabf58f3e8221138d556fba_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader

.exe 1.5MB

2026-11-01_a580f5083fabf58f3e8221138d556fba_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader

IMPHASH 6f41ff6d1cf97024c0055af5b82125fd
SHA256 19e1dd07c8cce07fa32b31819997d269cb4d6f61dad5511fea95c05d30707dff
MD5 a580f5083fabf58f3e8221138d556fba
SHA1 6d96a227e326b7d36bbdeaced218603509c40d7b
SHA512 78942dea48850c8f76b93d8d9bc20a13adda0347c870405abf4e3285d7cba59417f3611660659ff901de2576b4dec26f77b0bbc692595c2ff64fa54a2d153de8
SSDEEP 24576:Ay36GYRMFeYArgEhzZjCzjsA0HkWfwB5y7N51fhOB95Dr47iJ0nQZo2vI3:D6gFeRgUzejAkW4B5yh5phOlciSexvI
TLSH
T1CB7523043AC1C072E2B289350E96DE364C7EFD704E446F67B780AA3DEF345D1962966B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22182

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

mi_exe_stub.pdb

kernel32

QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW OutputDebugStringW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx ReadFile CreateFileW CloseHandle WriteConsoleW DecodePointer CreateEventW WaitForSingleObjectEx ResetEvent SetEvent CreateDirectoryW SizeofResource RemoveDirectoryW GetTempPathW FormatMessageW LockResource DeleteFileW FindResourceExW LoadResource FindResourceW HeapDestroy LocalFree VerSetConditionMask CopyFileW VerifyVersionInfoW GetTempFileNameW lstrcmpiW UnmapViewOfFile CreateFileMappingW MapViewOfFile VirtualQuery SetFilePointer WaitForSingleObject CreateProcessW GetExitCodeProcess

shlwapi

PathQuoteSpacesW PathAppendW

ole32

CoUninitialize CoInitializeEx

shell32

SHGetFolderPathW ord680

user32

MessageBoxW CharLowerBuffW

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_a580f5083fabf58f3e8221138d556fba_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader

kernel32

shlwapi

ole32

shell32

user32

generic