General
- Target 2026-06-04_aa8bcdc372c5bbc2dd623796cfd9544a_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260604-s87mjsax6p
- SHA256 5ab7922d53226ae46f2c0ce42ad1655162a9fc97b13ea0274c982e9e1492cdc9
- MD5 aa8bcdc372c5bbc2dd623796cfd9544a
- SHA1 fafbcedcf2d71568136defa5381d1e881a5e1b0f
- SHA512 011c102550952bd5847a7ebf3290abdbe9d123d54f50cd255b40607df6aeb7cbb8ca240708f31ee5571a8c5445b1c864a4e4c135a2c43271fa2fd20e042c0ab6
- SSDEEP 12288:xUYJ9bi0GyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWI:KYJ9b5nQ/tbw/2Mkjy6Fr7g0oI
- TLSH T13865013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343C08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_aa8bcdc372c5bbc2dd623796cfd9544a_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_aa8bcdc372c5bbc2dd623796cfd9544a_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_aa8bcdc372c5bbc2dd623796cfd9544a_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 5ab7922d53226ae46f2c0ce42ad1655162a9fc97b13ea0274c982e9e1492cdc9
- MD5 aa8bcdc372c5bbc2dd623796cfd9544a
- SHA1 fafbcedcf2d71568136defa5381d1e881a5e1b0f
- SHA512 011c102550952bd5847a7ebf3290abdbe9d123d54f50cd255b40607df6aeb7cbb8ca240708f31ee5571a8c5445b1c864a4e4c135a2c43271fa2fd20e042c0ab6
- SSDEEP 12288:xUYJ9bi0GyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWI:KYJ9b5nQ/tbw/2Mkjy6Fr7g0oI
- TLSH T13865013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343C08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1