Overview

overview

4

Static

static

3

2026-05-05...os.exe

windows10-2004-x64

4

2026-05-05...os.exe

windows11-21h2-x64

4

Analysis

  • max time kernel
    149s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    05/05/2026, 02:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-05-05_2e0b486c862ba849336266aea2f07dda_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
  • Size 157KB
  • Sample260505-cfvvaaew6s
  • SHA256 198063262645d57383ff8434b23f2b81b90d33dc19d1b477b5160c891e2e9c92
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discovery

Malware Config

Signatures

  • Drops file in Program Files directory 30 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-05-05_2e0b486c862ba849336266aea2f07dda_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-05-05_2e0b486c862ba849336266aea2f07dda_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    PID:5716

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ie_to_edge_stub.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\BHO\ie_to_edge_stub.exe
        • Size 554KB
        • SHA256 5895069952b847a7e9ae9e4ee833ccc2f2f20314620b1f509d1d0e160806b255
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cookie_exporter.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
        • Size 146KB
        • SHA256 7c0e575aa14a22b060904314223b27463eb9db6bc520e884ccfbec353dc7152b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        identity_helper.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        • Size 1.4MB
        • SHA256 c0f7e6f8540056af82dd57ea6aef35995ac0e760c873d7098423b9fd61bba278
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge_pwa_launcher.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_pwa_launcher.exe
        • Size 1.9MB
        • SHA256 a0a44365d6ffded9ba294ddb2dad50437aa30db6579da14ec5428b12f97dc770
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        0e581b43.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\0e581b43.tmp
        • Size 1.4MB
        • SHA256 d3b78e7ed236350a7647030fcb7dfcef8a154aa67363741b13f53268a23ae01c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        0e581b43.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\0e581b43.tmp
        • Size 32KB
        • SHA256 f56907dd0ef7ad9b83f17665d5463ae7633baeeeaea62644c237e9b5bc98aefe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wctBFE5.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\wctBFE5.tmp
        • Size 40.6MB
        • SHA256 d6802ed31260ad8d439cb49429c88837d000866be829c26d7fb09c1d3a864e6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download