General
- Target 2026-06-27_36d53bb61eecc63f6e57d1ab519bdee5_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.5MB
- Sample260629-kel5raaz2l
- SHA256 bc0b5866b0722a08b9a56f55c2452ece0fad617ae888270b0541172f1cc3494c
- MD5 36d53bb61eecc63f6e57d1ab519bdee5
- SHA1 a4c34c46316b12fa82b6cbd6d4956b93d5465e44
- SHA512 97d475253d23a4edcaaf570dfdabc95f9cf61cd8501ff2cabe0f71dfd4a4f88d337493272ae82788a2563ddd82b950066da3b83e6634cea27f14064813123377
- SSDEEP 12288:jq9PGxTszBAGubvoXmH3P9xJ08G5xo2sS9fizfqlgU6dFgU7fNj7EOV7VoXGiel5:+5GtI/4jK8Gzo2sUi+ZUgUJkGZlcf4
- TLSH T11875121171C084F3EAB31A3009B09A716A3DFE341FB589EB73952B2A5D346D29D38677
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_36d53bb61eecc63f6e57d1ab519bdee5_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_36d53bb61eecc63f6e57d1ab519bdee5_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.5MB
- SHA256 bc0b5866b0722a08b9a56f55c2452ece0fad617ae888270b0541172f1cc3494c
- MD5 36d53bb61eecc63f6e57d1ab519bdee5
- SHA1 a4c34c46316b12fa82b6cbd6d4956b93d5465e44
- SHA512 97d475253d23a4edcaaf570dfdabc95f9cf61cd8501ff2cabe0f71dfd4a4f88d337493272ae82788a2563ddd82b950066da3b83e6634cea27f14064813123377
- SSDEEP 12288:jq9PGxTszBAGubvoXmH3P9xJ08G5xo2sS9fizfqlgU6dFgU7fNj7EOV7VoXGiel5:+5GtI/4jK8Gzo2sUi+ZUgUJkGZlcf4
- TLSH T11875121171C084F3EAB31A3009B09A716A3DFE341FB589EB73952B2A5D346D29D38677
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1