General
- Target 2026-07-08_92c3458807ff8b8b7d512fb1bd7674d3_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader
- Size 1.5MB
- Sample260708-kc625sds8t
- SHA256 a41ad13edc16008b7eb78a037a811a3e92118a985ab1dfe85db0d5a86239dde5
- MD5 92c3458807ff8b8b7d512fb1bd7674d3
- SHA1 c9b1edcd88194c3aeb5a84b8723c9ea309c13833
- SHA512 0f0a276bfac9dfc7863ef97ab72df2114830e0c88cacb9505da97270140820c0d4024de3ffd6fc5fa77f65da5c9ff0db54df3610a790b03496de44717285d454
- SSDEEP 12288:3R0t6muufhrIu3ZcHf7oOyZakKLcDW4r7X71QYy2dx3T+sLhHm:hTru9J27I4kKAl1Q32dxD+sdHm
- TLSH T17D75F00079808470F35A17305960E6F14A6EEC780AE4E9AFF3B87E7659740E36A3756F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_92c3458807ff8b8b7d512fb1bd7674d3_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_92c3458807ff8b8b7d512fb1bd7674d3_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader
- Size 1.5MB
- SHA256 a41ad13edc16008b7eb78a037a811a3e92118a985ab1dfe85db0d5a86239dde5
- MD5 92c3458807ff8b8b7d512fb1bd7674d3
- SHA1 c9b1edcd88194c3aeb5a84b8723c9ea309c13833
- SHA512 0f0a276bfac9dfc7863ef97ab72df2114830e0c88cacb9505da97270140820c0d4024de3ffd6fc5fa77f65da5c9ff0db54df3610a790b03496de44717285d454
- SSDEEP 12288:3R0t6muufhrIu3ZcHf7oOyZakKLcDW4r7X71QYy2dx3T+sLhHm:hTru9J27I4kKAl1Q32dxD+sdHm
- TLSH T17D75F00079808470F35A17305960E6F14A6EEC780AE4E9AFF3B87E7659740E36A3756F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1