General
- Target 2026-07-14_df1acf2799d4c1cf45241824e4954d7d_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 489KB
- Sample260714-dc9dyae141
- SHA256 0ef2410f2bb33f7e9e3b979b1a5ab28a61a2aa0b3fe1ffb57f3cf6cf2cd6a7a0
- MD5 df1acf2799d4c1cf45241824e4954d7d
- SHA1 f1d224a026341aca44cf630e6a68027ffe8149a5
- SHA512 555550b43c6bff5ec90a835f6f260e00255ac0c55c4cb1f09d7031365d600b1a8e65d59a3bc1a9fcbcc7f2b97fd58549c34ba363290590793ed6875800387119
- SSDEEP 6144:2tP3i+eagL34/w7CqdQVxzIYLfvyVUOiW131zRKQ/wfC+LV3Y5Lf9GaaJhQCNBUd:uw532+RWPzrlO91bKQofLLeVf9GHJhtu
- TLSH T1FFB4BF12B7D4907BE4B695318AE85731DAB5F9200B344BDF13848A9D1E316E09F3EB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_df1acf2799d4c1cf45241824e4954d7d_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_df1acf2799d4c1cf45241824e4954d7d_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_df1acf2799d4c1cf45241824e4954d7d_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 489KB
- SHA256 0ef2410f2bb33f7e9e3b979b1a5ab28a61a2aa0b3fe1ffb57f3cf6cf2cd6a7a0
- MD5 df1acf2799d4c1cf45241824e4954d7d
- SHA1 f1d224a026341aca44cf630e6a68027ffe8149a5
- SHA512 555550b43c6bff5ec90a835f6f260e00255ac0c55c4cb1f09d7031365d600b1a8e65d59a3bc1a9fcbcc7f2b97fd58549c34ba363290590793ed6875800387119
- SSDEEP 6144:2tP3i+eagL34/w7CqdQVxzIYLfvyVUOiW131zRKQ/wfC+LV3Y5Lf9GaaJhQCNBUd:uw532+RWPzrlO91bKQofLLeVf9GHJhtu
- TLSH T1FFB4BF12B7D4907BE4B695318AE85731DAB5F9200B344BDF13848A9D1E316E09F3EB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory