General
- Target 2026-08-03_5b09638c2949e816410bb27b3e143670_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260803-fsaxesstht
- SHA256 dc9eca930569e1dfa9d53c9b8ba4b7c86c5aea781e210d8dc7e1474d091fdfc1
- MD5 5b09638c2949e816410bb27b3e143670
- SHA1 cd2574028fc13845fd1f3fd889ae5d0652f674a8
- SHA512 cfad9949225cab3f46205740aecda78930382ea24e4dd7ddd2b1103251d58555c3eaa92d9f3bc7236120ee97e1dec39a49c57249aba0ed51d5322c3962d46079
- SSDEEP 24576:OYJ9bk/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:OYJtkLNiXicJFFRGNzj3
- TLSH T15265026171C084B2EAB704350AB89670AA7CFD354F2549EBA3943B6E5A347D1CE38773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_5b09638c2949e816410bb27b3e143670_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_5b09638c2949e816410bb27b3e143670_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 dc9eca930569e1dfa9d53c9b8ba4b7c86c5aea781e210d8dc7e1474d091fdfc1
- MD5 5b09638c2949e816410bb27b3e143670
- SHA1 cd2574028fc13845fd1f3fd889ae5d0652f674a8
- SHA512 cfad9949225cab3f46205740aecda78930382ea24e4dd7ddd2b1103251d58555c3eaa92d9f3bc7236120ee97e1dec39a49c57249aba0ed51d5322c3962d46079
- SSDEEP 24576:OYJ9bk/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:OYJtkLNiXicJFFRGNzj3
- TLSH T15265026171C084B2EAB704350AB89670AA7CFD354F2549EBA3943B6E5A347D1CE38773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1