General
- Target 2026-07-28_507920dac679681d56aec06bb31d4a28_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- Sample260729-bmtp5aej3y
- SHA256 e60fb4b5800c215665eb615913d70521f5d03c33219a061a0be054bb5308c246
- MD5 507920dac679681d56aec06bb31d4a28
- SHA1 c654f6e894f1f4dbd207c0441a00cef6607ff25d
- SHA512 1f963fcb10faccd4ceca52f726806345c0552af46bce6d7b79484ac1353bda78286bd70bd55f172cd65940c5d2a329fe02f14db56c2e0095e6024ffcc27467d2
- SSDEEP 12288:UUYJ9bizCrGnBM7L0upU+1y+AYXmUbibGqiMIjmYP2Fucf7N8zzI8tEV:RYJ9bkbBMvjRA+iqMIjmJ8c+hE
- TLSH T16855013131C084B2EA73193409F8A7B2866DFC766F2099DB735527AB5E342D0993DB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_507920dac679681d56aec06bb31d4a28_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_507920dac679681d56aec06bb31d4a28_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- SHA256 e60fb4b5800c215665eb615913d70521f5d03c33219a061a0be054bb5308c246
- MD5 507920dac679681d56aec06bb31d4a28
- SHA1 c654f6e894f1f4dbd207c0441a00cef6607ff25d
- SHA512 1f963fcb10faccd4ceca52f726806345c0552af46bce6d7b79484ac1353bda78286bd70bd55f172cd65940c5d2a329fe02f14db56c2e0095e6024ffcc27467d2
- SSDEEP 12288:UUYJ9bizCrGnBM7L0upU+1y+AYXmUbibGqiMIjmYP2Fucf7N8zzI8tEV:RYJ9bkbBMvjRA+iqMIjmJ8c+hE
- TLSH T16855013131C084B2EA73193409F8A7B2866DFC766F2099DB735527AB5E342D0993DB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1