General
- Target 2026-08-03_cbca121a10d6d10e06688aa6e6736ab8_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260804-lnzmwaxakd
- SHA256 1f39acdade3764c9f927ce4de0d13a0ad92561740c811a5b2cba2932a7f9d404
- MD5 cbca121a10d6d10e06688aa6e6736ab8
- SHA1 80568d6b38f19a99a74b487004354ca185c6392c
- SHA512 dcca076c5daa3f6606b445ed0b936c05303acb94c65ea9d630f844c6d3a4a15f2971b140dafb5998b407a201355cf5dbfe422707808fbc341cc25c12174dc091
- SSDEEP 49152:FWJE2ZctEafitmGYj+uYP4D2VPrXnJ5khWtUqXPy538Q1:aE2ZBaqaj+uYP4sr3XleMA
- TLSH T1A7852301B5E59074EBF61735A869D9A00EBCFC204E348A9F63843E745E78580E939FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_cbca121a10d6d10e06688aa6e6736ab8_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_cbca121a10d6d10e06688aa6e6736ab8_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 1f39acdade3764c9f927ce4de0d13a0ad92561740c811a5b2cba2932a7f9d404
- MD5 cbca121a10d6d10e06688aa6e6736ab8
- SHA1 80568d6b38f19a99a74b487004354ca185c6392c
- SHA512 dcca076c5daa3f6606b445ed0b936c05303acb94c65ea9d630f844c6d3a4a15f2971b140dafb5998b407a201355cf5dbfe422707808fbc341cc25c12174dc091
- SSDEEP 49152:FWJE2ZctEafitmGYj+uYP4D2VPrXnJ5khWtUqXPy538Q1:aE2ZBaqaj+uYP4sr3XleMA
- TLSH T1A7852301B5E59074EBF61735A869D9A00EBCFC204E348A9F63843E745E78580E939FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1