General
- Target 2026-07-10_fb0989af39038590ca623cfad2bbde79_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- Sample260710-xpy9aahy5y
- SHA256 a326f5ba205b81cb54af796b45882c1833144678ad475281cc80f8a4c250f8bb
- MD5 fb0989af39038590ca623cfad2bbde79
- SHA1 9e1fd50ecec190f1f8b2c66ff6f61daf1aa6db66
- SHA512 df509a46813a7c29076f4a9ed0aaaab8216a57d9b21818d0a5601c9ec6bb65f2915e5f05e720de4cecf7309f90ca4ba783f350ecee88571fe49e26456cd520c6
- SSDEEP 12288:HUYJ9biuUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8z:0YJ9bZatr0zAiX90z/F0jsFB3SQkU
- TLSH T1EA55022631C180F3D9B3093106A8DA725A7DFD715FA159DBA3913B9F5E302C09A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_fb0989af39038590ca623cfad2bbde79_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_fb0989af39038590ca623cfad2bbde79_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- SHA256 a326f5ba205b81cb54af796b45882c1833144678ad475281cc80f8a4c250f8bb
- MD5 fb0989af39038590ca623cfad2bbde79
- SHA1 9e1fd50ecec190f1f8b2c66ff6f61daf1aa6db66
- SHA512 df509a46813a7c29076f4a9ed0aaaab8216a57d9b21818d0a5601c9ec6bb65f2915e5f05e720de4cecf7309f90ca4ba783f350ecee88571fe49e26456cd520c6
- SSDEEP 12288:HUYJ9biuUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8z:0YJ9bZatr0zAiX90z/F0jsFB3SQkU
- TLSH T1EA55022631C180F3D9B3093106A8DA725A7DFD715FA159DBA3913B9F5E302C09A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1