General
- Target 2026-07-19_a5439fce51a2640db2330a0214d97d1a_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- Sample260720-a7g2dsc17t
- SHA256 18deca871ecaaefb16452add584948e6a40d0bcdf3be6d8529cf4723bd63fd57
- MD5 a5439fce51a2640db2330a0214d97d1a
- SHA1 c06ca261e217d1a7c21afc3e3bdf4909b8aa74c4
- SHA512 e14942843dd8720c3859397a757aa6282a6ef1212907c69e99850076534472e67b745b1b061d766fb3aaac8ff7d5737b351b77c6bccd880ac09a6e819c29d6ff
- SSDEEP 12288:4UYJ9biC34XiPvrLr0Ci41UO5wHPdjIpTEx/Mz0gLeAfsVyqBn9r2ill:FYJ9buSnnrFb4PM4MYgLxEVyGLX
- TLSH T17655013176C080F3DEB7053045F8A6B5963DFC72AF6159DF63942AAA2E342C09939763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_a5439fce51a2640db2330a0214d97d1a_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_a5439fce51a2640db2330a0214d97d1a_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- SHA256 18deca871ecaaefb16452add584948e6a40d0bcdf3be6d8529cf4723bd63fd57
- MD5 a5439fce51a2640db2330a0214d97d1a
- SHA1 c06ca261e217d1a7c21afc3e3bdf4909b8aa74c4
- SHA512 e14942843dd8720c3859397a757aa6282a6ef1212907c69e99850076534472e67b745b1b061d766fb3aaac8ff7d5737b351b77c6bccd880ac09a6e819c29d6ff
- SSDEEP 12288:4UYJ9biC34XiPvrLr0Ci41UO5wHPdjIpTEx/Mz0gLeAfsVyqBn9r2ill:FYJ9buSnnrFb4PM4MYgLxEVyGLX
- TLSH T17655013176C080F3DEB7053045F8A6B5963DFC72AF6159DF63942AAA2E342C09939763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1