General
- Target 2026-07-09_fb60b13cbf9980d7eaaf742fad8157e1_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.3MB
- Sample260709-b36dvsct4z
- SHA256 ae09385e5ead865f470542ab301dd64b0de9b2a55b98ca68c423880654e86ea3
- MD5 fb60b13cbf9980d7eaaf742fad8157e1
- SHA1 4b7c2afb14a7dfb1a86c97400676d1780c8c4151
- SHA512 64e64dae80d25ac89a870e2771e6852e381bc290696a8378fcbf90eeab0dc3a3320c26a059f0077ec5cb4d59624611e26cc82ddebadd455701baedeed6c5efe1
- SSDEEP 24576:uD+/YMvvvp9o6jauPbLqAzcRPLPWTI7yBwSnnrFb4PM4MYgLxEVyGLt:M+/9vnoQLDLqAzcRzOTIOBDj4MYPVyGZ
- TLSH T1E255BD09F58CE0A0CCEECD30BDB3846D29267DA05A215B7E0E5474676FF17CE9429E26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_fb60b13cbf9980d7eaaf742fad8157e1_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_fb60b13cbf9980d7eaaf742fad8157e1_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.3MB
- SHA256 ae09385e5ead865f470542ab301dd64b0de9b2a55b98ca68c423880654e86ea3
- MD5 fb60b13cbf9980d7eaaf742fad8157e1
- SHA1 4b7c2afb14a7dfb1a86c97400676d1780c8c4151
- SHA512 64e64dae80d25ac89a870e2771e6852e381bc290696a8378fcbf90eeab0dc3a3320c26a059f0077ec5cb4d59624611e26cc82ddebadd455701baedeed6c5efe1
- SSDEEP 24576:uD+/YMvvvp9o6jauPbLqAzcRPLPWTI7yBwSnnrFb4PM4MYgLxEVyGLt:M+/9vnoQLDLqAzcRzOTIOBDj4MYPVyGZ
- TLSH T1E255BD09F58CE0A0CCEECD30BDB3846D29267DA05A215B7E0E5474676FF17CE9429E26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1