General
- Target 2026-07-20_2f22b921e6a4c2e83cd839fa8f9225cc_amadey_elex_hellokitty_luca-stealer_lynx_njrat
- Size 1.4MB
- Sample260720-tk11jahv2s
- SHA256 8075a6cf2181cf4aa040a953823a32e4b4eec4f4110197a4c5f77fbd9c9d5303
- MD5 2f22b921e6a4c2e83cd839fa8f9225cc
- SHA1 9f27edc9a8ce435ba8715b9617ef0b7160e8bc96
- SHA512 9a02627c3dc98ad29788395706ba37da7c2f138ef4724c99c60dd859d272d42fa1b7bff4f5a68bd773027b4d388cf6c0ff43bc8dac541ddb66438a195f853290
- SSDEEP 12288:8mvB+z4Xd6aH++hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:PvgzVaeyxknw4FYnshx8OfVe247
- TLSH T1D865126476C2C472E47A19330970E2715A2EF9705F70866FA3A8713EDEB04E0A52ED77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_2f22b921e6a4c2e83cd839fa8f9225cc_amadey_elex_hellokitty_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_2f22b921e6a4c2e83cd839fa8f9225cc_amadey_elex_hellokitty_luca-stealer_lynx_njrat
- Size 1.4MB
- SHA256 8075a6cf2181cf4aa040a953823a32e4b4eec4f4110197a4c5f77fbd9c9d5303
- MD5 2f22b921e6a4c2e83cd839fa8f9225cc
- SHA1 9f27edc9a8ce435ba8715b9617ef0b7160e8bc96
- SHA512 9a02627c3dc98ad29788395706ba37da7c2f138ef4724c99c60dd859d272d42fa1b7bff4f5a68bd773027b4d388cf6c0ff43bc8dac541ddb66438a195f853290
- SSDEEP 12288:8mvB+z4Xd6aH++hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:PvgzVaeyxknw4FYnshx8OfVe247
- TLSH T1D865126476C2C472E47A19330970E2715A2EF9705F70866FA3A8713EDEB04E0A52ED77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1