General
- Target 2026-08-03_352773b50b9bae58d8b62d9e986ef0ce_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.4MB
- Sample260803-paandaam41
- SHA256 4837a2544c35ae5f9153ad18b568034cf6cc48d3978cda1f94bcf2074e3b1aeb
- MD5 352773b50b9bae58d8b62d9e986ef0ce
- SHA1 0f7cb4c643a417f4e6dc24329fe00fe1ec3cb195
- SHA512 54b97a3615f730cc00dd417c42a8a9eb2bbfea52b8f60c2f370a8d49a85ddc0e84937a42d481961ea6d5f800ea7f4ad9e8f4a259452dc33cfd8aaab69e270972
- SSDEEP 12288:z93G6vHzOASubviBNDYa30GyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWx:zVGGTWBZEnQ/tbw/2Mkjy6Fr7g0ox
- TLSH T18165012136D0D4B3E973093048B18A616A3EFE702FA59ADF7384172E5E743D14A39B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_352773b50b9bae58d8b62d9e986ef0ce_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_352773b50b9bae58d8b62d9e986ef0ce_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.4MB
- SHA256 4837a2544c35ae5f9153ad18b568034cf6cc48d3978cda1f94bcf2074e3b1aeb
- MD5 352773b50b9bae58d8b62d9e986ef0ce
- SHA1 0f7cb4c643a417f4e6dc24329fe00fe1ec3cb195
- SHA512 54b97a3615f730cc00dd417c42a8a9eb2bbfea52b8f60c2f370a8d49a85ddc0e84937a42d481961ea6d5f800ea7f4ad9e8f4a259452dc33cfd8aaab69e270972
- SSDEEP 12288:z93G6vHzOASubviBNDYa30GyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWx:zVGGTWBZEnQ/tbw/2Mkjy6Fr7g0ox
- TLSH T18165012136D0D4B3E973093048B18A616A3EFE702FA59ADF7384172E5E743D14A39B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1