General
- Target 2026-07-06_dd24338c8d4ecf85f815a21f5030d567_amadey_elex_floxif_hellokitty_hijackloader_luca-stealer_njrat
- Size 1.2MB
- Sample260706-v5d7yad19p
- SHA256 eda6d9cd19afea1d0aed033937f5805c9b4d0854b11273ddd08867650e7d71c9
- MD5 dd24338c8d4ecf85f815a21f5030d567
- SHA1 a95fe24b1a85807bd4a512b0d0c9aede3e8dadba
- SHA512 45b9b15b66171623db21ebce3b0a91f6e34205ad5278cacb8fde9fc2ee9deeb0a71ad4b66cba029bcedaa9759c5a39b0f83b8fc72c4fba66fe16e05e9dc39569
- SSDEEP 24576:jmgr/0zvpIw8UAB8PXL8ukJP7zMeEsYXzxd4e1HJg5VSSy:1r/CpI3mPqkiY/hX
- TLSH T1E8451204B3E44036F4B31A3216F46AB60A79FC3069BA1A4F53C51E5E5BB06D2E774B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_dd24338c8d4ecf85f815a21f5030d567_amadey_elex_floxif_hellokitty_hijackloader_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_dd24338c8d4ecf85f815a21f5030d567_amadey_elex_floxif_hellokitty_hijackloader_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_dd24338c8d4ecf85f815a21f5030d567_amadey_elex_floxif_hellokitty_hijackloader_luca-stealer_njrat
- Size 1.2MB
- SHA256 eda6d9cd19afea1d0aed033937f5805c9b4d0854b11273ddd08867650e7d71c9
- MD5 dd24338c8d4ecf85f815a21f5030d567
- SHA1 a95fe24b1a85807bd4a512b0d0c9aede3e8dadba
- SHA512 45b9b15b66171623db21ebce3b0a91f6e34205ad5278cacb8fde9fc2ee9deeb0a71ad4b66cba029bcedaa9759c5a39b0f83b8fc72c4fba66fe16e05e9dc39569
- SSDEEP 24576:jmgr/0zvpIw8UAB8PXL8ukJP7zMeEsYXzxd4e1HJg5VSSy:1r/CpI3mPqkiY/hX
- TLSH T1E8451204B3E44036F4B31A3216F46AB60A79FC3069BA1A4F53C51E5E5BB06D2E774B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.