General
- Target 2026-06-04_9a5142447cdf405596b81f8601c2bc7e_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- Sample260604-rtj29sgt91
- SHA256 3ccde8fd4168eca32da52cad9b4671ea483fc3b2eabf7271402aae513e49d50e
- MD5 9a5142447cdf405596b81f8601c2bc7e
- SHA1 7a737665e87488156b0ce151c01333cce1f1fa12
- SHA512 9709abef1044f807dd2a63ab36a12c8465c1df02477b60d61349410aa17d40362fdba526297eae0788ba64ac8dc7f056ac06501a88501a0163698d9757bbabf8
- SSDEEP 24576:TYJ9bxOrRCBq6gQ9awp0yfuKw81mI8bhp:TYJtxOfDeaa/fuQ1mIg
- TLSH T1E3550265B0C194B2EEB3453409B8DA71AA7DFD714F600CDF63A4276A5A302C0EE39767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_9a5142447cdf405596b81f8601c2bc7e_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_9a5142447cdf405596b81f8601c2bc7e_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_9a5142447cdf405596b81f8601c2bc7e_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- SHA256 3ccde8fd4168eca32da52cad9b4671ea483fc3b2eabf7271402aae513e49d50e
- MD5 9a5142447cdf405596b81f8601c2bc7e
- SHA1 7a737665e87488156b0ce151c01333cce1f1fa12
- SHA512 9709abef1044f807dd2a63ab36a12c8465c1df02477b60d61349410aa17d40362fdba526297eae0788ba64ac8dc7f056ac06501a88501a0163698d9757bbabf8
- SSDEEP 24576:TYJ9bxOrRCBq6gQ9awp0yfuKw81mI8bhp:TYJtxOfDeaa/fuQ1mIg
- TLSH T1E3550265B0C194B2EEB3453409B8DA71AA7DFD714F600CDF63A4276A5A302C0EE39767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1