2026-11-03_7d3ef3e92c17f98f2f417a65d14701b8_amadey_elex_hellokitty_luca-stealer_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-03_7d3ef3e92c17f98f2f417a65d14701b8_amadey_elex_hellokitty_luca-stealer_njrat
Size 1.4MB
Sample261104-tg2snabt5x
SHA256 5b4791519d25eba55af9e306865ff2aab6d96d7cadfa69f6c989fa2386bda189
MD5 7d3ef3e92c17f98f2f417a65d14701b8
SHA1 09719a2da92e9bc9f87a8812392beb5fb68f3b8a
SHA512 bf20d80b83248d2ac09c5b94e357b532bf1640d374b9fbfdc5caa02e7a8ca5c9d660c2ce9210ebe0c0ef4ff659dbd5a795cd39473ecb4357e306f9a3655264e4
SSDEEP 24576:9BcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nB0:9BPBiRe6NrfMnm
TLSH
T1A3659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_7d3ef3e92c17f98f2f417a65d14701b8_amadey_elex_hellokitty_luca-stealer_njrat

File Explorer

2026-11-03_7d3ef3e92c17f98f2f417a65d14701b8_amadey_elex_hellokitty_luca-stealer_njrat

.exe 1.4MB

2026-11-03_7d3ef3e92c17f98f2f417a65d14701b8_amadey_elex_hellokitty_luca-stealer_njrat

IMPHASH 92868f971b0daf78612bc37cae53e57c
SHA256 5b4791519d25eba55af9e306865ff2aab6d96d7cadfa69f6c989fa2386bda189
MD5 7d3ef3e92c17f98f2f417a65d14701b8
SHA1 09719a2da92e9bc9f87a8812392beb5fb68f3b8a
SHA512 bf20d80b83248d2ac09c5b94e357b532bf1640d374b9fbfdc5caa02e7a8ca5c9d660c2ce9210ebe0c0ef4ff659dbd5a795cd39473ecb4357e306f9a3655264e4
SSDEEP 24576:9BcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nB0:9BPBiRe6NrfMnm
TLSH
T1A3659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27882

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetSystemMetrics LoadCursorA FindWindowA GetCursorPos MsgWaitForMultipleObjectsEx CreateWindowExA RegisterClassExA MsgWaitForMultipleObjects DestroyWindow UnregisterClassA DefWindowProcA PeekMessageW PeekMessageA LoadStringA DispatchMessageW DispatchMessageA TranslateMessage RegisterWindowMessageA LoadIconA DestroyIcon LoadImageA SystemParametersInfoA

gdi32

DeleteObject GetStockObject

comctl32

InitCommonControlsEx

advapi32

RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegCloseKey GetTokenInformation OpenProcessToken RegSetValueExA

ole32

CoCreateInstance CoInitializeEx

oleaut32

SafeArrayDestroy SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SafeArrayCreateVector VariantInit VariantClear SafeArrayCreate SafeArrayPutElement

shell32

SHAppBarMessage SHGetFileInfoA SetCurrentProcessExplicitAppUserModelID SHGetFolderPathW SHGetFolderPathA

shlwapi

PathFileExistsA

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

dwmapi

DwmIsCompositionEnabled

uxtheme

IsAppThemed IsThemeActive

wininet

InternetGetConnectedState InternetSetOptionA InternetReadFile InternetOpenUrlA InternetOpenA InternetCloseHandle

gdiplus

GdiplusShutdown GdiplusStartup

kernel32

SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte CompareStringW LCMapStringW HeapSize SetFilePointerEx HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer GetStringTypeW GetProcessHeap GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW GetFileType GetCommandLineW GetModuleHandleExW GetStdHandle RaiseException EncodePointer LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError RtlUnwind TerminateProcess GetModuleHandleW IsProcessorFeaturePresent GetStartupInfoW UnhandledExceptionFilter InitializeSListHead GetCurrentThreadId QueryPerformanceCounter Process32Next Process32First CreateToolhelp32Snapshot GetUserDefaultLCID GetACP GetCommandLineA GetEnvironmentVariableA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW FindClose FindFirstFileA FindNextFileA GetDiskFreeSpaceExA GetFileAttributesA GetFileAttributesW GetFileSizeEx ReadFile SetFileAttributesA SetFilePointer SetFileTime WriteFile IsDebuggerPresent CheckRemoteDebuggerPresent CloseHandle SetUnhandledExceptionFilter GetLastError SetErrorMode HeapAlloc HeapFree WriteConsoleW HeapSetInformation WaitForSingleObject CreateMutexA Sleep GetCurrentProcess GetCurrentProcessId ExitProcess GetExitCodeProcess CreateThread CreateProcessA CreateProcessW FlushInstructionCache OpenProcess GlobalMemoryStatusEx GetSystemTimeAsFileTime GetTickCount GetTickCount64 GetNativeSystemInfo GetPhysicallyInstalledSystemMemory SetProcessWorkingSetSize GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetProcAddress LoadResource LockResource SizeofResource LoadLibraryA lstrcmpiA lstrcpynA lstrcpyA lstrcatA lstrlenA OpenMutexA QueryFullProcessImageNameA QueryFullProcessImageNameW GetStartupInfoA FindResourceA CopyFileA MultiByteToWideChar

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_7d3ef3e92c17f98f2f417a65d14701b8_amadey_elex_hellokitty_luca-stealer_njrat

user32

gdi32

comctl32

advapi32

ole32

oleaut32

shell32

shlwapi

version

dwmapi

uxtheme

wininet

gdiplus

kernel32

generic