General
- Target 2026-07-10_eb9a3e19d246f326ca9487377078ba95_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260710-xvpl2aft7j
- SHA256 724fbf9e384178254efed9361f40467142848e8b2819af5c049539c3d67debb2
- MD5 eb9a3e19d246f326ca9487377078ba95
- SHA1 4c5d3b52e4b5d2758cca3f280bbdbdba758e67e0
- SHA512 4ed434d26b59a30b1462150c384d911edd34e29cba2fb116e7fff9b41f94fbd96c36a33506e13ccd9aa3223fc49bfd191f6e58879ca3c3bc1490e3c774ba9d6e
- SSDEEP 12288:uUYJ9bigGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWt:fYJ9blnQ/tbw/2Mkjy6Fr7g0ot
- TLSH T1F165013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_eb9a3e19d246f326ca9487377078ba95_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_eb9a3e19d246f326ca9487377078ba95_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 724fbf9e384178254efed9361f40467142848e8b2819af5c049539c3d67debb2
- MD5 eb9a3e19d246f326ca9487377078ba95
- SHA1 4c5d3b52e4b5d2758cca3f280bbdbdba758e67e0
- SHA512 4ed434d26b59a30b1462150c384d911edd34e29cba2fb116e7fff9b41f94fbd96c36a33506e13ccd9aa3223fc49bfd191f6e58879ca3c3bc1490e3c774ba9d6e
- SSDEEP 12288:uUYJ9bigGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWt:fYJ9blnQ/tbw/2Mkjy6Fr7g0ot
- TLSH T1F165013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1