General
- Target 2026-07-19_d3a2d9af11503b88afe55aa5d7f2f038_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.6MB
- Sample260720-avyhlsh18l
- SHA256 7ed383e94e2c2de02540cc95ba72a1179ca24d92e1ea6658e6ece01d30b6d216
- MD5 d3a2d9af11503b88afe55aa5d7f2f038
- SHA1 7136169c2611e8df0a521198cdcf6a278b96d70c
- SHA512 ec2985e493081d6ec19f61a48266d72917ceab704220ba0f7d9fb50f51ba2c87756eb2e420b7eae0bb69d91d57ddd12738f2a7654ad5955694fee3bc1d585c8e
- SSDEEP 24576:IYJ9bSixOFthHE8MEX1XsdIAhb0VECwN:IYJtSixO3hHE8MEXWI4bMQN
- TLSH T17B75022177C0C0B2DEB7193505F8A7B59ABDFD710F2049DBA39227AA5D302D09D39A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_d3a2d9af11503b88afe55aa5d7f2f038_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_d3a2d9af11503b88afe55aa5d7f2f038_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.6MB
- SHA256 7ed383e94e2c2de02540cc95ba72a1179ca24d92e1ea6658e6ece01d30b6d216
- MD5 d3a2d9af11503b88afe55aa5d7f2f038
- SHA1 7136169c2611e8df0a521198cdcf6a278b96d70c
- SHA512 ec2985e493081d6ec19f61a48266d72917ceab704220ba0f7d9fb50f51ba2c87756eb2e420b7eae0bb69d91d57ddd12738f2a7654ad5955694fee3bc1d585c8e
- SSDEEP 24576:IYJ9bSixOFthHE8MEX1XsdIAhb0VECwN:IYJtSixO3hHE8MEXWI4bMQN
- TLSH T17B75022177C0C0B2DEB7193505F8A7B59ABDFD710F2049DBA39227AA5D302D09D39A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1