General
- Target 2026-08-04_9e678e258f44533d236a0b8aa746f486_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.4MB
- Sample260804-gtz4dasele
- SHA256 9cde287573c60c7089b963a303e59318d87aa7a1a162e403f65686584340830e
- MD5 9e678e258f44533d236a0b8aa746f486
- SHA1 2e8512fedaa16a1cab395f199b2b2644de53d31e
- SHA512 01f412d6752aeb0b1d81f93fc89a99b453ce24b991b005ce0d43d0cdfb12ae751946d97cb8d99b863a1ab01113eee74510b8a98102a9a3e478056b658dfbddc3
- SSDEEP 12288:D93G6vHzOASubviBNDYa3OGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWZ:DVGGTWBZenQ/tbw/2Mkjy6Fr7g0oZ
- TLSH T1D665012136C0D4B3E973093048B18A616A3EFE702FA59ADF7384172E5E743D14A39B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_9e678e258f44533d236a0b8aa746f486_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_9e678e258f44533d236a0b8aa746f486_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.4MB
- SHA256 9cde287573c60c7089b963a303e59318d87aa7a1a162e403f65686584340830e
- MD5 9e678e258f44533d236a0b8aa746f486
- SHA1 2e8512fedaa16a1cab395f199b2b2644de53d31e
- SHA512 01f412d6752aeb0b1d81f93fc89a99b453ce24b991b005ce0d43d0cdfb12ae751946d97cb8d99b863a1ab01113eee74510b8a98102a9a3e478056b658dfbddc3
- SSDEEP 12288:D93G6vHzOASubviBNDYa3OGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWZ:DVGGTWBZenQ/tbw/2Mkjy6Fr7g0oZ
- TLSH T1D665012136C0D4B3E973093048B18A616A3EFE702FA59ADF7384172E5E743D14A39B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1