General
- Target 2026-07-30_a7f967f27870fee9b9f291d31f393236_amadey_elex_hellokitty_luca-stealer_lynx_njrat
- Size 1.5MB
- Sample260730-vrabtswxev
- SHA256 98fe2ee47e24d87b168f0a6eab3256b02bd4daa381e01a38f133d5cc72088474
- MD5 a7f967f27870fee9b9f291d31f393236
- SHA1 f398545922dd05d90b2d6c8d157876c75a2cd714
- SHA512 aa99e1de603f141fda51e17b9c46fbaa2eeac33ac7cd1a353c9d339615105877135a58fa74eeaefb2313e9d4280e7d0afc93da15d58d2dfecaf6527cfe12b9ce
- SSDEEP 12288:qZmdbex678tM6hct28uP18WR/FW2Gb8JTCMMK7LIFYJ1WroCrwah4:quex686mctvE/BT76+1NCE
- TLSH T11375120174C280B2DAB71A710560E3B1DA7CFEB01DA51DD773550A7F9F302D29A2AE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_a7f967f27870fee9b9f291d31f393236_amadey_elex_hellokitty_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_a7f967f27870fee9b9f291d31f393236_amadey_elex_hellokitty_luca-stealer_lynx_njrat
- Size 1.5MB
- SHA256 98fe2ee47e24d87b168f0a6eab3256b02bd4daa381e01a38f133d5cc72088474
- MD5 a7f967f27870fee9b9f291d31f393236
- SHA1 f398545922dd05d90b2d6c8d157876c75a2cd714
- SHA512 aa99e1de603f141fda51e17b9c46fbaa2eeac33ac7cd1a353c9d339615105877135a58fa74eeaefb2313e9d4280e7d0afc93da15d58d2dfecaf6527cfe12b9ce
- SSDEEP 12288:qZmdbex678tM6hct28uP18WR/FW2Gb8JTCMMK7LIFYJ1WroCrwah4:quex686mctvE/BT76+1NCE
- TLSH T11375120174C280B2DAB71A710560E3B1DA7CFEB01DA51DD773550A7F9F302D29A2AE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1