General
- Target 2026-08-03_a5a8f52642d3c13ca721bbda02e58338_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260804-mfm5jstsgs
- SHA256 2ea452c4dd9498cf55cb1585a64d24595f54e7d17558cbb2d4d211b84999db7c
- MD5 a5a8f52642d3c13ca721bbda02e58338
- SHA1 6a1343863d68d64fa8c845121552464c720827f0
- SHA512 d0d885e6967361f641cf3468ef6af0d9502315590a394b03794c05196395d5b35001d67a25e318e405acff72d845b26d93b8a0f6b4c4d6bb2637637067c8362d
- SSDEEP 49152:uWJE2ZctEafitmGYj+uYP4D2VPrXC7Jckdwi3N7+WTW3:jE2ZBaqaj+uYP4srgPdwi3Q
- TLSH T113852300B5D684B5E6F35B319979D6A08EF8FC301E249E9F53843A341E78680E939F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a5a8f52642d3c13ca721bbda02e58338_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a5a8f52642d3c13ca721bbda02e58338_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 2ea452c4dd9498cf55cb1585a64d24595f54e7d17558cbb2d4d211b84999db7c
- MD5 a5a8f52642d3c13ca721bbda02e58338
- SHA1 6a1343863d68d64fa8c845121552464c720827f0
- SHA512 d0d885e6967361f641cf3468ef6af0d9502315590a394b03794c05196395d5b35001d67a25e318e405acff72d845b26d93b8a0f6b4c4d6bb2637637067c8362d
- SSDEEP 49152:uWJE2ZctEafitmGYj+uYP4D2VPrXC7Jckdwi3N7+WTW3:jE2ZBaqaj+uYP4srgPdwi3Q
- TLSH T113852300B5D684B5E6F35B319979D6A08EF8FC301E249E9F53843A341E78680E939F76
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1