General
- Target 2026-07-31_5506631e44ea1bf2d9b87009098b4338_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.5MB
- Sample260731-wyrecsef97
- SHA256 ab56578f69f290748e333146a81dc4c2add0bf10eb26f73ddf02cf65e169ef3f
- MD5 5506631e44ea1bf2d9b87009098b4338
- SHA1 8d2483797f42dbc99be04e6d5f2bb724d589d79e
- SHA512 cab5bd4e0fc0ebfd405564fac545d07a6d8d4ebeda6cd3ef1d91042091a24d34603e56e5a3fe2afec35925787c1728ecb0c99095d03a53c2e825e9200f58f80b
- SSDEEP 12288:xUYJ9biQGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWa:KYJ9btnQ/tbw/2Mkjy6Fr7g0oa
- TLSH T11475013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_5506631e44ea1bf2d9b87009098b4338_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_5506631e44ea1bf2d9b87009098b4338_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.5MB
- SHA256 ab56578f69f290748e333146a81dc4c2add0bf10eb26f73ddf02cf65e169ef3f
- MD5 5506631e44ea1bf2d9b87009098b4338
- SHA1 8d2483797f42dbc99be04e6d5f2bb724d589d79e
- SHA512 cab5bd4e0fc0ebfd405564fac545d07a6d8d4ebeda6cd3ef1d91042091a24d34603e56e5a3fe2afec35925787c1728ecb0c99095d03a53c2e825e9200f58f80b
- SSDEEP 12288:xUYJ9biQGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWa:KYJ9btnQ/tbw/2Mkjy6Fr7g0oa
- TLSH T11475013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1