General
- Target 2026-07-01_20a161a40e5e6817f84f62ed568e58b6_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.5MB
- Sample260701-vxm5wabs2m
- SHA256 8c9eb12950ee3b5f87570f77dbe1198a53099f9d7924bcdc808f9c4f9de9f8ff
- MD5 20a161a40e5e6817f84f62ed568e58b6
- SHA1 e0de7ed0cef0a73f86572b249dabf93dee69e490
- SHA512 a383e78e2950dfcbe7f17c0cc5fdf2e2c31405f79e3d04a93b996a81d38232954e35f363c904b98c5497465af78c4d6d258a83e4e93f27092362aec0c339a99b
- SSDEEP 24576:25GtIv+j/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:6GCv+jLNiXicJFFRGNzj3
- TLSH T13265015132C080B3E9B7043449B49970A96DFE345F7549EBB3842B2E9E747D28E38B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_20a161a40e5e6817f84f62ed568e58b6_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_20a161a40e5e6817f84f62ed568e58b6_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.5MB
- SHA256 8c9eb12950ee3b5f87570f77dbe1198a53099f9d7924bcdc808f9c4f9de9f8ff
- MD5 20a161a40e5e6817f84f62ed568e58b6
- SHA1 e0de7ed0cef0a73f86572b249dabf93dee69e490
- SHA512 a383e78e2950dfcbe7f17c0cc5fdf2e2c31405f79e3d04a93b996a81d38232954e35f363c904b98c5497465af78c4d6d258a83e4e93f27092362aec0c339a99b
- SSDEEP 24576:25GtIv+j/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:6GCv+jLNiXicJFFRGNzj3
- TLSH T13265015132C080B3E9B7043449B49970A96DFE345F7549EBB3842B2E9E747D28E38B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1