General
- Target 2026-04-19_c5b9d9eef19ff94518f3ed2540fb4e97_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260420-bcf2aaaz2z
- SHA256 f8bb64dedf98df9cb957233dd38a56028285175470c8f62757351d2ef76f76e9
- MD5 c5b9d9eef19ff94518f3ed2540fb4e97
- SHA1 45fd555225ce8e4f0655f22918e7149e6c06fd97
- SHA512 5ecf0083c010e384c387376d43b2ca2a622faff595340829f6c2b4078cfb6b55ae0c3df1d73996457bbddcf303b49152231ca74ec3d3555a1759a204bee0490b
- SSDEEP 49152:5WJE2ZctEafitmGYj+uYP4D2VPrXt7UP9Fq4n:OE2ZBaqaj+uYP4srd7Ai4n
- TLSH T19195231076D2C4B5E6F71A716DA8C5A00EF9FC601E398AEF134479296F74980E438FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_c5b9d9eef19ff94518f3ed2540fb4e97_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_c5b9d9eef19ff94518f3ed2540fb4e97_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 f8bb64dedf98df9cb957233dd38a56028285175470c8f62757351d2ef76f76e9
- MD5 c5b9d9eef19ff94518f3ed2540fb4e97
- SHA1 45fd555225ce8e4f0655f22918e7149e6c06fd97
- SHA512 5ecf0083c010e384c387376d43b2ca2a622faff595340829f6c2b4078cfb6b55ae0c3df1d73996457bbddcf303b49152231ca74ec3d3555a1759a204bee0490b
- SSDEEP 49152:5WJE2ZctEafitmGYj+uYP4D2VPrXt7UP9Fq4n:OE2ZBaqaj+uYP4srd7Ai4n
- TLSH T19195231076D2C4B5E6F71A716DA8C5A00EF9FC601E398AEF134479296F74980E438FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1