General
- Target 2026-07-21_500f52e40f2036b95430d7c1270199de_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260721-sslp5sdp4w
- SHA256 38bd3fcca3477bb0328d7cb38bc14f317755a297fa24715cfaffbaaf7bdee901
- MD5 500f52e40f2036b95430d7c1270199de
- SHA1 501cc2bd0287404bda134e89c2e7b16d2937afec
- SHA512 b93a4249c0648a64610e9edb57e35454fd76bf7005bbd800b442ec0128398a9b86cb6a96e0de2f8171dc8cbbcbe2c97213d9c9b8a17ca1ef64174348bff93c36
- SSDEEP 12288:EUYJ9biuGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWz:BYJ9b7nQ/tbw/2Mkjy6Fr7g0oz
- TLSH T10565013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_500f52e40f2036b95430d7c1270199de_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_500f52e40f2036b95430d7c1270199de_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 38bd3fcca3477bb0328d7cb38bc14f317755a297fa24715cfaffbaaf7bdee901
- MD5 500f52e40f2036b95430d7c1270199de
- SHA1 501cc2bd0287404bda134e89c2e7b16d2937afec
- SHA512 b93a4249c0648a64610e9edb57e35454fd76bf7005bbd800b442ec0128398a9b86cb6a96e0de2f8171dc8cbbcbe2c97213d9c9b8a17ca1ef64174348bff93c36
- SSDEEP 12288:EUYJ9biuGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWz:BYJ9b7nQ/tbw/2Mkjy6Fr7g0oz
- TLSH T10565013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1