General
- Target 2026-07-13_ea7aa314255dceac5aced0ae97bd3974_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.6MB
- Sample260713-pzphtsht3k
- SHA256 1c050e2b5fd2bfb2bc6e91400508d0b7ed94aa90f566dfa2bee9c7d6591b280f
- MD5 ea7aa314255dceac5aced0ae97bd3974
- SHA1 a8df1766b27d6acbe8b02d1259c1dd355f02c9c7
- SHA512 5963b7b448b404b77f07f9769fed6a35f148d427fd50cd1ea491275d5b5e6f584ba5e92f234ed4ff38f7b1730df7e553d8ab600ad9c7ff8391ec3b04b0a69b5f
- SSDEEP 24576:W5GtIv+zgXe4i7ojhsP5Lgrk1TWb4AN5:aGCv+Ke30jaNf1TWbdz
- TLSH T13275011136C084B3E1A3463045F1CBB1A97DFE702F6449EF63D02B6A5E746D29E38A67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_ea7aa314255dceac5aced0ae97bd3974_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_ea7aa314255dceac5aced0ae97bd3974_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.6MB
- SHA256 1c050e2b5fd2bfb2bc6e91400508d0b7ed94aa90f566dfa2bee9c7d6591b280f
- MD5 ea7aa314255dceac5aced0ae97bd3974
- SHA1 a8df1766b27d6acbe8b02d1259c1dd355f02c9c7
- SHA512 5963b7b448b404b77f07f9769fed6a35f148d427fd50cd1ea491275d5b5e6f584ba5e92f234ed4ff38f7b1730df7e553d8ab600ad9c7ff8391ec3b04b0a69b5f
- SSDEEP 24576:W5GtIv+zgXe4i7ojhsP5Lgrk1TWb4AN5:aGCv+Ke30jaNf1TWbdz
- TLSH T13275011136C084B3E1A3463045F1CBB1A97DFE702F6449EF63D02B6A5E746D29E38A67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1