General
- Target 2026-07-28_176896fb6f428c008af3cc8b7a31faca_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- Sample260728-xte17stdmb
- SHA256 601ac5e4ed9ae9329e7501d9a521c9b60dd12c1f9788f74c0cc9ec6b4b339074
- MD5 176896fb6f428c008af3cc8b7a31faca
- SHA1 75185af51df50a3cce1693ef09e703fd339d5d4d
- SHA512 9ff9f4e0e77a8cc32f9246d47d3ef908c867c1aa7fc4b217c0075f876d70785ad858ff77431987f477fcb491398ee9538806f9d6e21c5e63ce9b6a3511e17b99
- SSDEEP 12288:OUYJ9bimrGnBM7L0upU+1y+AYXmUbibGqiMIjmYP2Fucf7N8zzI8tEV:/YJ9bCBMvjRA+iqMIjmJ8c+hE
- TLSH T19155013131C084B2EA73193409F8A7B2866DFC766F2099DB735527AB5E342D0993DB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_176896fb6f428c008af3cc8b7a31faca_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_176896fb6f428c008af3cc8b7a31faca_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- SHA256 601ac5e4ed9ae9329e7501d9a521c9b60dd12c1f9788f74c0cc9ec6b4b339074
- MD5 176896fb6f428c008af3cc8b7a31faca
- SHA1 75185af51df50a3cce1693ef09e703fd339d5d4d
- SHA512 9ff9f4e0e77a8cc32f9246d47d3ef908c867c1aa7fc4b217c0075f876d70785ad858ff77431987f477fcb491398ee9538806f9d6e21c5e63ce9b6a3511e17b99
- SSDEEP 12288:OUYJ9bimrGnBM7L0upU+1y+AYXmUbibGqiMIjmYP2Fucf7N8zzI8tEV:/YJ9bCBMvjRA+iqMIjmJ8c+hE
- TLSH T19155013131C084B2EA73193409F8A7B2866DFC766F2099DB735527AB5E342D0993DB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1