General
- Target 2026-07-24_de95409befb90d6bc4536a0d16866f7b_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- Sample260724-3rxfcshk9y
- SHA256 b145bcb5962206b64d56a38c181bb94eacc4c826c0785ab32a884a468ea7cf95
- MD5 de95409befb90d6bc4536a0d16866f7b
- SHA1 d968c36963af660ade11a27c87b79131db072a24
- SHA512 d8fbcc42ee638349bdae0fa37057655e7ca4e8a8c384be8d5f8b0125358c61ef38670e598c92858ce0d195879638bd3d603828c86ac3cd5a2c9bf3fe0b88fd8a
- SSDEEP 12288:7UYJ9bivXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:YYJ9besqjnhMgeiCl7G0nehbGZpbD
- TLSH T10755027572C080B3DA73083146F8E675993EFD725F2048DB67952BAEAE701D08A39763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_de95409befb90d6bc4536a0d16866f7b_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_de95409befb90d6bc4536a0d16866f7b_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- SHA256 b145bcb5962206b64d56a38c181bb94eacc4c826c0785ab32a884a468ea7cf95
- MD5 de95409befb90d6bc4536a0d16866f7b
- SHA1 d968c36963af660ade11a27c87b79131db072a24
- SHA512 d8fbcc42ee638349bdae0fa37057655e7ca4e8a8c384be8d5f8b0125358c61ef38670e598c92858ce0d195879638bd3d603828c86ac3cd5a2c9bf3fe0b88fd8a
- SSDEEP 12288:7UYJ9bivXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:YYJ9besqjnhMgeiCl7G0nehbGZpbD
- TLSH T10755027572C080B3DA73083146F8E675993EFD725F2048DB67952BAEAE701D08A39763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1