General
- Target 2026-08-03_9f735adf5cf6ece666b4b76f6ddc191e_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260804-mkfahaxgqb
- SHA256 0b803ae1798cc5e022c6286a69a8f7f5d8a901373807507d9f87591801254acb
- MD5 9f735adf5cf6ece666b4b76f6ddc191e
- SHA1 91fa47abc280f27899279c1cd3f4e7fd53c496b6
- SHA512 c75e5c4a651d74439c042f8fb436b18bd98ae61ffc24d26d04427a083969f38d7e825eb86e7d4d8a98a54fe814b8c6c8f2c7e458d1c42607e806413d46bb339e
- SSDEEP 49152:jWJE2ZctEafitmGYj+uYP4D2VPrXv0LEi4mXq:kE2ZBaqaj+uYP4sr8LEi44
- TLSH T11B85231075E5C4B4E6F21E34A87A95A04FB9FC304A604ADF63C47E391B78980D978FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_9f735adf5cf6ece666b4b76f6ddc191e_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_9f735adf5cf6ece666b4b76f6ddc191e_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 0b803ae1798cc5e022c6286a69a8f7f5d8a901373807507d9f87591801254acb
- MD5 9f735adf5cf6ece666b4b76f6ddc191e
- SHA1 91fa47abc280f27899279c1cd3f4e7fd53c496b6
- SHA512 c75e5c4a651d74439c042f8fb436b18bd98ae61ffc24d26d04427a083969f38d7e825eb86e7d4d8a98a54fe814b8c6c8f2c7e458d1c42607e806413d46bb339e
- SSDEEP 49152:jWJE2ZctEafitmGYj+uYP4D2VPrXv0LEi4mXq:kE2ZBaqaj+uYP4sr8LEi44
- TLSH T11B85231075E5C4B4E6F21E34A87A95A04FB9FC304A604ADF63C47E391B78980D978FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1