General
- Target 2026-07-31_8f5624d7707359266758573eccc7cbca_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- Sample260731-remvlshm2w
- SHA256 a4a83f1eb51040155c8575e916e43aaba8841501c20bb9964ea20ea1327891c1
- MD5 8f5624d7707359266758573eccc7cbca
- SHA1 01d7c9ee8c932b5920076a76762ce87bb5a16331
- SHA512 fe49fd273516acd302cdb096a0b5672e22b9ea71bf8710c0c2ddb3749fb43295f5b3c283a03e00fd628ac12798ee09cb0dd19f4f010fbb8b3c06edf5ffbe5159
- SSDEEP 12288:rUYJ9binenxHCUvfdCz3CKBUXL/k1xW1TYSchtXIK46X4qZjfq:IYJ9bo4JPv69mL/ogpPX6X4qZjfq
- TLSH T10655022571C080F2DA73053169B49A70AA7DFC725F245CEBA39127AF5A342D0DE38A77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_8f5624d7707359266758573eccc7cbca_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_8f5624d7707359266758573eccc7cbca_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- SHA256 a4a83f1eb51040155c8575e916e43aaba8841501c20bb9964ea20ea1327891c1
- MD5 8f5624d7707359266758573eccc7cbca
- SHA1 01d7c9ee8c932b5920076a76762ce87bb5a16331
- SHA512 fe49fd273516acd302cdb096a0b5672e22b9ea71bf8710c0c2ddb3749fb43295f5b3c283a03e00fd628ac12798ee09cb0dd19f4f010fbb8b3c06edf5ffbe5159
- SSDEEP 12288:rUYJ9binenxHCUvfdCz3CKBUXL/k1xW1TYSchtXIK46X4qZjfq:IYJ9bo4JPv69mL/ogpPX6X4qZjfq
- TLSH T10655022571C080F2DA73053169B49A70AA7DFC725F245CEBA39127AF5A342D0DE38A77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1