General
- Target 2026-05-16_3c1109d6c1c5561878bbe214592d56da_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 2.2MB
- Sample260516-rc5yeahy2l
- SHA256 175db71ada0b49bce9925b46d792aefb5f93a3bf89e40630cd5d41a609f81c36
- MD5 3c1109d6c1c5561878bbe214592d56da
- SHA1 1b43f299e77343faa034ade4031d6011e4ccca8e
- SHA512 442849c310bdf650c193f4c003933a959d11c31fdc909a9d4c501a5bcf7004159af8da9a765ec0c09007b79cc5feeb42a8b2e5150ca026d8cc37b6b83518a7a9
- SSDEEP 49152:BmrQ5WRs5WWQMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMMMqNMMzMMMUMMVMMI:B75WRs5WWQMMHMMMvMMZMMMlmMMMiMMM
- TLSH T135B59D42F7C8D466E0BA06308937D7700666FD658F2496EF329A771E2D323C25A72E17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-16_3c1109d6c1c5561878bbe214592d56da_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_3c1109d6c1c5561878bbe214592d56da_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_3c1109d6c1c5561878bbe214592d56da_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 2.2MB
- SHA256 175db71ada0b49bce9925b46d792aefb5f93a3bf89e40630cd5d41a609f81c36
- MD5 3c1109d6c1c5561878bbe214592d56da
- SHA1 1b43f299e77343faa034ade4031d6011e4ccca8e
- SHA512 442849c310bdf650c193f4c003933a959d11c31fdc909a9d4c501a5bcf7004159af8da9a765ec0c09007b79cc5feeb42a8b2e5150ca026d8cc37b6b83518a7a9
- SSDEEP 49152:BmrQ5WRs5WWQMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMMMqNMMzMMMUMMVMMI:B75WRs5WWQMMHMMMvMMZMMMlmMMMiMMM
- TLSH T135B59D42F7C8D466E0BA06308937D7700666FD658F2496EF329A771E2D323C25A72E17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory