General
- Target 2026-07-04_3ac8c3144f1c0d0e917fff5abce33274_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260704-xwvvfacv5v
- SHA256 562a991c5b4e8cd52d31fbf78d6c5047380bcfc648488a67f4c2bae216b94507
- MD5 3ac8c3144f1c0d0e917fff5abce33274
- SHA1 6d337996f0527b0c26e8d6aabd614e5296f27127
- SHA512 f88280ee6c8df6bb4ded8c8039fefc975d8776a1e9abd1d04e6ab488e5b11adcf3af6572d272e6c0f08f1aa524a546f792afd0d828cbd5de4422c1e056f0654d
- SSDEEP 49152:HWJE2ZctEafitmGYj+uYP4D2VPrXktb3EFCfJq/9y:4E2ZBaqaj+uYP4srcb3EFMq/I
- TLSH T17085231176D280B4E6F31A74997AD6A04FB8FC304D748A9F639479392F785C0E938B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_3ac8c3144f1c0d0e917fff5abce33274_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_3ac8c3144f1c0d0e917fff5abce33274_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 562a991c5b4e8cd52d31fbf78d6c5047380bcfc648488a67f4c2bae216b94507
- MD5 3ac8c3144f1c0d0e917fff5abce33274
- SHA1 6d337996f0527b0c26e8d6aabd614e5296f27127
- SHA512 f88280ee6c8df6bb4ded8c8039fefc975d8776a1e9abd1d04e6ab488e5b11adcf3af6572d272e6c0f08f1aa524a546f792afd0d828cbd5de4422c1e056f0654d
- SSDEEP 49152:HWJE2ZctEafitmGYj+uYP4D2VPrXktb3EFCfJq/9y:4E2ZBaqaj+uYP4srcb3EFMq/I
- TLSH T17085231176D280B4E6F31A74997AD6A04FB8FC304D748A9F639479392F785C0E938B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1