General
- Target 2026-07-11_f7225c8d70dc71995a1084cb29c0096f_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.5MB
- Sample260711-mec8ysfz2k
- SHA256 21d832ae09ad7dbc54f2c904948beaf8a457c30d11f8a33e3d24d699d868bd6d
- MD5 f7225c8d70dc71995a1084cb29c0096f
- SHA1 911dbeeddc88eaa5c31fc7d6d1ff6240df5a99d2
- SHA512 7f4aee616de4f48f569cad672427e58d78c2678cf030b88424d4f45269e0b416c23ef62c9ca5695753811acb44163dc71114ed19003a466f55dd9feacf5a23d4
- SSDEEP 12288:E93G6vHzOASubviBNDYa3F+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxQ:EVGGTWBZ1yxknw4FYnshx8OfVe247
- TLSH T12175122472C1C0B3E96319310AB0A6716A3EFD305F7585DFA398272EADB05D1993DB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_f7225c8d70dc71995a1084cb29c0096f_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_f7225c8d70dc71995a1084cb29c0096f_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.5MB
- SHA256 21d832ae09ad7dbc54f2c904948beaf8a457c30d11f8a33e3d24d699d868bd6d
- MD5 f7225c8d70dc71995a1084cb29c0096f
- SHA1 911dbeeddc88eaa5c31fc7d6d1ff6240df5a99d2
- SHA512 7f4aee616de4f48f569cad672427e58d78c2678cf030b88424d4f45269e0b416c23ef62c9ca5695753811acb44163dc71114ed19003a466f55dd9feacf5a23d4
- SSDEEP 12288:E93G6vHzOASubviBNDYa3F+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxQ:EVGGTWBZ1yxknw4FYnshx8OfVe247
- TLSH T12175122472C1C0B3E96319310AB0A6716A3EFD305F7585DFA398272EADB05D1993DB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1