General
- Target 2026-07-09_87ce99d7201f83904052c4ffb56339d1_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader
- Size 1.5MB
- Sample260709-chmlpabx2l
- SHA256 9993aa70b97ad08d55fcbe4ecac36bddc5ac839477a26efec7dcd6b4d92f87e2
- MD5 87ce99d7201f83904052c4ffb56339d1
- SHA1 96bd7074eb77449ff76c03ef4a3cd257641edc31
- SHA512 793cd212d64d107b09a1b78d81bf40aaf78b8ffd86c576a204e2d1de2742860653598750c56cb0a7bb11274d8c8633c38cb6a4e4ed5077ca8a9706b35a9e41e9
- SSDEEP 24576:sG1x2+uCjGcGYCSnnrFb4PM4MYgLxEVyGLs:ssx2RCjdGY9j4MYPVyGLs
- TLSH T17775E02172E180B2E5F72A3059B4E6B55A3EBD319F34D5AF6394166E1E30AC0C931B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_87ce99d7201f83904052c4ffb56339d1_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_87ce99d7201f83904052c4ffb56339d1_amadey_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader
- Size 1.5MB
- SHA256 9993aa70b97ad08d55fcbe4ecac36bddc5ac839477a26efec7dcd6b4d92f87e2
- MD5 87ce99d7201f83904052c4ffb56339d1
- SHA1 96bd7074eb77449ff76c03ef4a3cd257641edc31
- SHA512 793cd212d64d107b09a1b78d81bf40aaf78b8ffd86c576a204e2d1de2742860653598750c56cb0a7bb11274d8c8633c38cb6a4e4ed5077ca8a9706b35a9e41e9
- SSDEEP 24576:sG1x2+uCjGcGYCSnnrFb4PM4MYgLxEVyGLs:ssx2RCjdGY9j4MYPVyGLs
- TLSH T17775E02172E180B2E5F72A3059B4E6B55A3EBD319F34D5AF6394166E1E30AC0C931B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1