General
- Target 2026-06-29_43bb02329f0cc9c8ae76e9815a3d2c17_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 2.4MB
- Sample260630-mdrd7acw4y
- SHA256 8a3a9bb76de801dd592b14d402046aca38b3bf018aa98205d3deb8f78a473eff
- MD5 43bb02329f0cc9c8ae76e9815a3d2c17
- SHA1 7a42841974cbf1c9e6c0da82749df1faadef59c7
- SHA512 0139a198b1ddaa2fa1a1433003c61c85fe1622c9326e87f3b79201d49e0fef3a7de6d1bfc3cf0b25856094b22c7a222da7fd432d80bababe3516f34d08d7c2c5
- SSDEEP 49152:z9m95d76suD+XFA+5aa5i50PYDwyt64fQyHbbf08xwmaQFurd:z9evesuDRna5JPYGy7bMpLd
- TLSH T152C523057190C079C863D83489629667EAB5FC371C24970FA7E7387A8F75382BD19BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-29_43bb02329f0cc9c8ae76e9815a3d2c17_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_43bb02329f0cc9c8ae76e9815a3d2c17_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_43bb02329f0cc9c8ae76e9815a3d2c17_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 2.4MB
- SHA256 8a3a9bb76de801dd592b14d402046aca38b3bf018aa98205d3deb8f78a473eff
- MD5 43bb02329f0cc9c8ae76e9815a3d2c17
- SHA1 7a42841974cbf1c9e6c0da82749df1faadef59c7
- SHA512 0139a198b1ddaa2fa1a1433003c61c85fe1622c9326e87f3b79201d49e0fef3a7de6d1bfc3cf0b25856094b22c7a222da7fd432d80bababe3516f34d08d7c2c5
- SSDEEP 49152:z9m95d76suD+XFA+5aa5i50PYDwyt64fQyHbbf08xwmaQFurd:z9evesuDRna5JPYGy7bMpLd
- TLSH T152C523057190C079C863D83489629667EAB5FC371C24970FA7E7387A8F75382BD19BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Adds Run key to start application
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1