General
- Target 2026-07-30_c93006076277c05d09e9c494177529bf_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.5MB
- Sample260730-qqxcraar8w
- SHA256 39aff916a1f635464253027b42a6a985c1f88ae43c9a0f9a99ab44ff01cd430e
- MD5 c93006076277c05d09e9c494177529bf
- SHA1 77f211bdd0d7ce968049540de7583ac43ec0f5a4
- SHA512 302a07ee248bad2af6d03a362c4cdacd5f630f02b0fcd04b8b916071fc655ebd5293369d32a7ca2a4a16943a0df6b716f35ac51b2a5eaca8ff3e718af979c6d7
- SSDEEP 12288:QUYJ9bi4RBDPoWg3IyhxVIQh33CXMmWUao8dEQyo+dP6/EjzWrVYNM:NYJ9b/CBhxV1hnEMwaoKyo+ccj+V
- TLSH T143750120B6C090B3DAB305311AF89671AA3DFD754F215ADF53902BAA1E741D18E397B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_c93006076277c05d09e9c494177529bf_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_c93006076277c05d09e9c494177529bf_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.5MB
- SHA256 39aff916a1f635464253027b42a6a985c1f88ae43c9a0f9a99ab44ff01cd430e
- MD5 c93006076277c05d09e9c494177529bf
- SHA1 77f211bdd0d7ce968049540de7583ac43ec0f5a4
- SHA512 302a07ee248bad2af6d03a362c4cdacd5f630f02b0fcd04b8b916071fc655ebd5293369d32a7ca2a4a16943a0df6b716f35ac51b2a5eaca8ff3e718af979c6d7
- SSDEEP 12288:QUYJ9bi4RBDPoWg3IyhxVIQh33CXMmWUao8dEQyo+dP6/EjzWrVYNM:NYJ9b/CBhxV1hnEMwaoKyo+ccj+V
- TLSH T143750120B6C090B3DAB305311AF89671AA3DFD754F215ADF53902BAA1E741D18E397B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1