General
- Target 2026-07-06_1e5719619d1ac6cb4466bd6a700cff5c_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.5MB
- Sample260706-2c2wvscx6v
- SHA256 e23569b5fd74244fec188977d924be9eddce1d793493c86f47565e4ad778347d
- MD5 1e5719619d1ac6cb4466bd6a700cff5c
- SHA1 730176efe74e66c67bbd4d6357d2e33f3964955a
- SHA512 ef8d27245aec984b8dc02ffcf41a7b513fef8f8d4a7355790b6e8f12dc0e26d54c6dcdbedf05bfc01fdf1e1e6ffc7ea3fbd047ed701989434f77c7faf1fd3cf0
- SSDEEP 12288:FtV7uWRf0TjEhxCWsxw9Q5m7k4IB5EIYky37JX38CPDpNJdmjZ8KJB3rO3f:NaWt08qa959YZHy79PdNmjZFJtq3
- TLSH T11875120172C59471E5B7093008B4AAB1A97EFC341F215EE7D3986AAF8F706C09936B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_1e5719619d1ac6cb4466bd6a700cff5c_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_1e5719619d1ac6cb4466bd6a700cff5c_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_1e5719619d1ac6cb4466bd6a700cff5c_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.5MB
- SHA256 e23569b5fd74244fec188977d924be9eddce1d793493c86f47565e4ad778347d
- MD5 1e5719619d1ac6cb4466bd6a700cff5c
- SHA1 730176efe74e66c67bbd4d6357d2e33f3964955a
- SHA512 ef8d27245aec984b8dc02ffcf41a7b513fef8f8d4a7355790b6e8f12dc0e26d54c6dcdbedf05bfc01fdf1e1e6ffc7ea3fbd047ed701989434f77c7faf1fd3cf0
- SSDEEP 12288:FtV7uWRf0TjEhxCWsxw9Q5m7k4IB5EIYky37JX38CPDpNJdmjZ8KJB3rO3f:NaWt08qa959YZHy79PdNmjZFJtq3
- TLSH T11875120172C59471E5B7093008B4AAB1A97EFC341F215EE7D3986AAF8F706C09936B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.