General
- Target 2026-08-03_203f5e150abcc225220ed971c5d0663b_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.3MB
- Sample260804-drspqsfk91
- SHA256 de0f84184e894a73ca171c718adda25081f84c9c079dcd9611164d876ecfb40a
- MD5 203f5e150abcc225220ed971c5d0663b
- SHA1 18bc77b5d8ac9a70c1f035b68085d6d3f27082ea
- SHA512 86a1c681c97cbb0d14e4f5af4790ac63db934bdd9b58e81d06b117863a631bbd30f40798a02b359ddde0a5bb6b2ffa549a2b8d6b4003ae06d8485c3c205b3f4f
- SSDEEP 24576:TVGGTWBZOatr0zAiX90z/F0jsFB3SQkZ:BGyWBZOaB0zj0yjoB2
- TLSH T1A255011231C180F3D8A31A3055B49A615A7DFE301FA15ADF73943B6F9E742C24A39BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_203f5e150abcc225220ed971c5d0663b_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_203f5e150abcc225220ed971c5d0663b_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.3MB
- SHA256 de0f84184e894a73ca171c718adda25081f84c9c079dcd9611164d876ecfb40a
- MD5 203f5e150abcc225220ed971c5d0663b
- SHA1 18bc77b5d8ac9a70c1f035b68085d6d3f27082ea
- SHA512 86a1c681c97cbb0d14e4f5af4790ac63db934bdd9b58e81d06b117863a631bbd30f40798a02b359ddde0a5bb6b2ffa549a2b8d6b4003ae06d8485c3c205b3f4f
- SSDEEP 24576:TVGGTWBZOatr0zAiX90z/F0jsFB3SQkZ:BGyWBZOaB0zj0yjoB2
- TLSH T1A255011231C180F3D8A31A3055B49A615A7DFE301FA15ADF73943B6F9E742C24A39BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1