General
- Target 2026-08-03_a1fe91e0828ace9b3554e34f1eee69db_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260804-mh147attew
- SHA256 4f60b215f232f0dbb906fe8164a002f655653b20f6c6e61e42faa735f71ee485
- MD5 a1fe91e0828ace9b3554e34f1eee69db
- SHA1 a414811bcfe6989042af208a2f77a436044b39e8
- SHA512 dad004cc9181c8ec0aa9c684ea3cf93b31519d4811ef002699b04b125d564a765d428ba655d96e443b13d6039301ccbf7dd4bcab88a2ec4c38e206efd7919640
- SSDEEP 49152:wWJE2ZctEafitmGYj+uYP4D2VPrXtadt0zYyC:RE2ZBaqaj+uYP4sr9ktUYyC
- TLSH T17F85234171D6C478E6F61B31A869D5B04FB9FC205A64CA9F63483D344FF8880E539BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a1fe91e0828ace9b3554e34f1eee69db_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a1fe91e0828ace9b3554e34f1eee69db_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 4f60b215f232f0dbb906fe8164a002f655653b20f6c6e61e42faa735f71ee485
- MD5 a1fe91e0828ace9b3554e34f1eee69db
- SHA1 a414811bcfe6989042af208a2f77a436044b39e8
- SHA512 dad004cc9181c8ec0aa9c684ea3cf93b31519d4811ef002699b04b125d564a765d428ba655d96e443b13d6039301ccbf7dd4bcab88a2ec4c38e206efd7919640
- SSDEEP 49152:wWJE2ZctEafitmGYj+uYP4D2VPrXtadt0zYyC:RE2ZBaqaj+uYP4sr9ktUYyC
- TLSH T17F85234171D6C478E6F61B31A869D5B04FB9FC205A64CA9F63483D344FF8880E539BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1