General
- Target 2026-07-05_a219a5e97501a59070f1c2fd9f8caec5_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260705-tfgfbshs9r
- SHA256 558cbcd1439dfd0c9d2fd65897b7ab709bcba9a2a6e17a71ac2653baa21d5055
- MD5 a219a5e97501a59070f1c2fd9f8caec5
- SHA1 136642293aeb83f66ed1a53533adb86b1fc3a82e
- SHA512 e28f1653ed8bd53042dfc55ede2111b5cf5bfb7c445695ec99c2dae79d110459291517719a6570d47f7ab69d61db99e84e3a778c97ad0dd550d9e5756b816071
- SSDEEP 49152:XWJE2ZctEafitmGYj+uYP4D2VPrXc929JWqq+AOx2XT:IE2ZBaqaj+uYP4srQOJWAo
- TLSH T131952311B1D5C4B4D9B216399CB9D5B04DBCFC704B658AEF63843E280F78591E83ABA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_a219a5e97501a59070f1c2fd9f8caec5_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_a219a5e97501a59070f1c2fd9f8caec5_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 558cbcd1439dfd0c9d2fd65897b7ab709bcba9a2a6e17a71ac2653baa21d5055
- MD5 a219a5e97501a59070f1c2fd9f8caec5
- SHA1 136642293aeb83f66ed1a53533adb86b1fc3a82e
- SHA512 e28f1653ed8bd53042dfc55ede2111b5cf5bfb7c445695ec99c2dae79d110459291517719a6570d47f7ab69d61db99e84e3a778c97ad0dd550d9e5756b816071
- SSDEEP 49152:XWJE2ZctEafitmGYj+uYP4D2VPrXc929JWqq+AOx2XT:IE2ZBaqaj+uYP4srQOJWAo
- TLSH T131952311B1D5C4B4D9B216399CB9D5B04DBCFC704B658AEF63843E280F78591E83ABA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1