General
- Target 2026-07-29_f3029da65e5fe2af42f09e6dd8e64793_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- Sample260729-xtfyhadd53
- SHA256 4c46ddfbc69aab6b15f535ab2a74df9309f3d7aac61fbb387e2c0dea2181f0e1
- MD5 f3029da65e5fe2af42f09e6dd8e64793
- SHA1 f343543002441d75b535267de3e8ffc8653b0eb4
- SHA512 4d885633fcca8ab2acb42d3d0f1e45420e831c3df73c0039484dcc754003d3d0fb4b27c9ab93ea4abaf53beef3e76cdc5aa3db3eaa7d557393e6f45b4a415aa3
- SSDEEP 12288:OUYJ9birrGnBM7L0upU+1y+AYXmUbibGqiMIjmYP2Fucf7N8zzI8tEV:/YJ9bbBMvjRA+iqMIjmJ8c+hE
- TLSH T10D55013131C084B2EA73193409F8A7B2866DFC726F2099DB735527AB5E342D0993DB67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_f3029da65e5fe2af42f09e6dd8e64793_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_f3029da65e5fe2af42f09e6dd8e64793_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- SHA256 4c46ddfbc69aab6b15f535ab2a74df9309f3d7aac61fbb387e2c0dea2181f0e1
- MD5 f3029da65e5fe2af42f09e6dd8e64793
- SHA1 f343543002441d75b535267de3e8ffc8653b0eb4
- SHA512 4d885633fcca8ab2acb42d3d0f1e45420e831c3df73c0039484dcc754003d3d0fb4b27c9ab93ea4abaf53beef3e76cdc5aa3db3eaa7d557393e6f45b4a415aa3
- SSDEEP 12288:OUYJ9birrGnBM7L0upU+1y+AYXmUbibGqiMIjmYP2Fucf7N8zzI8tEV:/YJ9bbBMvjRA+iqMIjmJ8c+hE
- TLSH T10D55013131C084B2EA73193409F8A7B2866DFC726F2099DB735527AB5E342D0993DB67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1