General
- Target 2026-07-08_d26aeab4a29bd1eb1422dcfcd895ddaf_amadey_elex_floxif_hellokitty_luca-stealer_njrat
- Size 1.2MB
- Sample260708-erxt5abs9k
- SHA256 bd705bda52f134baf26e615e5ec8d9041e8bf2a33cf5cc6c6cd429a02f41282c
- MD5 d26aeab4a29bd1eb1422dcfcd895ddaf
- SHA1 3692ed847ceacffdd2d6ccc839109827ce296709
- SHA512 92915f771f1354d563276df47320c8bd2ffc05bb7f53994cfc7310617c890639db677cb9256252a637f322e830d15dafa2af9be20e1b6ee36a83f62c42858d08
- SSDEEP 24576:1mOr/YNcgqRpeKu4qcgru3tY/Gy1+KawNzuq8eWq3jV4EGZgo/pv95eK75ddp0OY:5r/bZuhAtYdXbuqkWVpGZgav7F7dpFW
- TLSH T17D451210B2E44076F5B36D3196E05F72197DFC315EA79A1F27C21E182BB05C2EA24B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_d26aeab4a29bd1eb1422dcfcd895ddaf_amadey_elex_floxif_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_d26aeab4a29bd1eb1422dcfcd895ddaf_amadey_elex_floxif_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_d26aeab4a29bd1eb1422dcfcd895ddaf_amadey_elex_floxif_hellokitty_luca-stealer_njrat
- Size 1.2MB
- SHA256 bd705bda52f134baf26e615e5ec8d9041e8bf2a33cf5cc6c6cd429a02f41282c
- MD5 d26aeab4a29bd1eb1422dcfcd895ddaf
- SHA1 3692ed847ceacffdd2d6ccc839109827ce296709
- SHA512 92915f771f1354d563276df47320c8bd2ffc05bb7f53994cfc7310617c890639db677cb9256252a637f322e830d15dafa2af9be20e1b6ee36a83f62c42858d08
- SSDEEP 24576:1mOr/YNcgqRpeKu4qcgru3tY/Gy1+KawNzuq8eWq3jV4EGZgo/pv95eK75ddp0OY:5r/bZuhAtYdXbuqkWVpGZgav7F7dpFW
- TLSH T17D451210B2E44076F5B36D3196E05F72197DFC315EA79A1F27C21E182BB05C2EA24B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.