General
- Target 2026-07-29_4f2976ba021556080e6e83bcc7d8901e_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260729-pkrpmstgle
- SHA256 c20e1824a3fbbeb07f83fa1ef9aacc9bbf9b5fef5fc7c9a56f02ab0ddb6aab29
- MD5 4f2976ba021556080e6e83bcc7d8901e
- SHA1 92ad4fa9df395ca7102ccd0cd266cef5bdf26cd9
- SHA512 b5d2cf4f36bc4c66ee97faa6923a45ddaa7d159579b5a8b0fbcab15f256036b352e115705782442771703ce35099b8c75a37ca488f5b4bf27b4e1edc68fdbf31
- SSDEEP 49152:cWJE2ZctEafitmGYj+uYP4D2VPrXhcfT1S1:NE2ZBaqaj+uYP4srxcfT1Q
- TLSH T1E585231175D684B8E6F25B359975C5A00FB8FC704F208AEF539438352FB8980E939BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_4f2976ba021556080e6e83bcc7d8901e_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_4f2976ba021556080e6e83bcc7d8901e_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 c20e1824a3fbbeb07f83fa1ef9aacc9bbf9b5fef5fc7c9a56f02ab0ddb6aab29
- MD5 4f2976ba021556080e6e83bcc7d8901e
- SHA1 92ad4fa9df395ca7102ccd0cd266cef5bdf26cd9
- SHA512 b5d2cf4f36bc4c66ee97faa6923a45ddaa7d159579b5a8b0fbcab15f256036b352e115705782442771703ce35099b8c75a37ca488f5b4bf27b4e1edc68fdbf31
- SSDEEP 49152:cWJE2ZctEafitmGYj+uYP4D2VPrXhcfT1S1:NE2ZBaqaj+uYP4srxcfT1Q
- TLSH T1E585231175D684B8E6F25B359975C5A00FB8FC704F208AEF539438352FB8980E939BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1