General
- Target 2026-07-17_b98e6fc50678be28f216a349b918b2ce_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260718-ctfbrads3p
- SHA256 ff9ae595d982164f4c148a2f1e363a609c25a2d2bf8f4c260f1deaa78ab68c16
- MD5 b98e6fc50678be28f216a349b918b2ce
- SHA1 e6df3bc155fb778fafd4ad9d506002821ee0b415
- SHA512 57c912bdb105854a183046f2982d0d6bb3e79b829064f05a8a7f1cb56d04a7cfecb0e6f5ff1dbdb7d4a949df382c4419c241ffb5fbb99ea439bcf78b7cf1f92e
- SSDEEP 12288:7UYJ9biDGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW4:YYJ9bOnQ/tbw/2Mkjy6Fr7g0o4
- TLSH T13865013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_b98e6fc50678be28f216a349b918b2ce_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_b98e6fc50678be28f216a349b918b2ce_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 ff9ae595d982164f4c148a2f1e363a609c25a2d2bf8f4c260f1deaa78ab68c16
- MD5 b98e6fc50678be28f216a349b918b2ce
- SHA1 e6df3bc155fb778fafd4ad9d506002821ee0b415
- SHA512 57c912bdb105854a183046f2982d0d6bb3e79b829064f05a8a7f1cb56d04a7cfecb0e6f5ff1dbdb7d4a949df382c4419c241ffb5fbb99ea439bcf78b7cf1f92e
- SSDEEP 12288:7UYJ9biDGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW4:YYJ9bOnQ/tbw/2Mkjy6Fr7g0o4
- TLSH T13865013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1