General
- Target 2026-08-02_831460467627c8da37ebe334113686ed_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.6MB
- Sample260802-nes5va1gqa
- SHA256 6eb7a51df005fc0d24d50981ef31bd9f77dad371eb945269bb9466fdb860bf42
- MD5 831460467627c8da37ebe334113686ed
- SHA1 505d966c22a3356de90a40245f7f7af7998fa176
- SHA512 cf019185bde930fc27ee6d2ff055187cb3dc3a592a67f15b82133726b025425333a6e37eaaecb3ada78a5b15d2d8bdd2beda87f04dcd156874c15a3c1f1827b4
- SSDEEP 12288:KUYJ9bihksLmONw/CX7YNmysags3R3DGwv5NjOytLsX1UGjEhlr6:LYJ9bE9Xozsr8zbhN6GwXOGIh4
- TLSH T1FB750272B6C19473EAB3093109F49AB09A7EFC724F510ADB2364179A9D341D0AE39773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_831460467627c8da37ebe334113686ed_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_831460467627c8da37ebe334113686ed_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.6MB
- SHA256 6eb7a51df005fc0d24d50981ef31bd9f77dad371eb945269bb9466fdb860bf42
- MD5 831460467627c8da37ebe334113686ed
- SHA1 505d966c22a3356de90a40245f7f7af7998fa176
- SHA512 cf019185bde930fc27ee6d2ff055187cb3dc3a592a67f15b82133726b025425333a6e37eaaecb3ada78a5b15d2d8bdd2beda87f04dcd156874c15a3c1f1827b4
- SSDEEP 12288:KUYJ9bihksLmONw/CX7YNmysags3R3DGwv5NjOytLsX1UGjEhlr6:LYJ9bE9Xozsr8zbhN6GwXOGIh4
- TLSH T1FB750272B6C19473EAB3093109F49AB09A7EFC724F510ADB2364179A9D341D0AE39773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1