General
- Target 2026-05-05_4ef1738224f948ceed0d35fc898eaf13_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.2MB
- Sample260505-c23f9abs2p
- SHA256 4e19c4f1b17f4bd305f9b25d4d373630dc3fe06ea6b62f7f848bfda212b96e66
- MD5 4ef1738224f948ceed0d35fc898eaf13
- SHA1 3c85743a28b446a4134e67af8c48a14aa7de683d
- SHA512 26c21e070c6eec123e39007c21854d04fad949febb512b5e435e3d187d2b7601f170ac8add9c2bb2f42313d14062b5a70b01eb643940371b3ab053979fd9e395
- SSDEEP 12288:uw532+RWPzrlO91bKaOWZRfgEKhaTY8D3DNVLt/LEsEz5YOOMwThEszNblZM:XRazrU3KLCRYEKYxDTPt/LEbGhEQbG
- TLSH T1B745A31273E94129F5B73A7449B986754A3BBC619B39C6CF029C111E4BB3AC09E34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-05_4ef1738224f948ceed0d35fc898eaf13_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_4ef1738224f948ceed0d35fc898eaf13_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win11-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_4ef1738224f948ceed0d35fc898eaf13_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.2MB
- SHA256 4e19c4f1b17f4bd305f9b25d4d373630dc3fe06ea6b62f7f848bfda212b96e66
- MD5 4ef1738224f948ceed0d35fc898eaf13
- SHA1 3c85743a28b446a4134e67af8c48a14aa7de683d
- SHA512 26c21e070c6eec123e39007c21854d04fad949febb512b5e435e3d187d2b7601f170ac8add9c2bb2f42313d14062b5a70b01eb643940371b3ab053979fd9e395
- SSDEEP 12288:uw532+RWPzrlO91bKaOWZRfgEKhaTY8D3DNVLt/LEsEz5YOOMwThEszNblZM:XRazrU3KLCRYEKYxDTPt/LEbGhEQbG
- TLSH T1B745A31273E94129F5B73A7449B986754A3BBC619B39C6CF029C111E4BB3AC09E34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory