General
- Target 2026-08-03_68ccbd58e8d46160ab8558ad54934e87_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260804-nn4ypsyfnd
- SHA256 26d4239d84a5b31635f88d77c621d969327795a21e28ca037d34200e0f71600d
- MD5 68ccbd58e8d46160ab8558ad54934e87
- SHA1 f51d7aed6ed43b40ca28ddb75c04d902cac01edd
- SHA512 d03bda93722c74ae51606001b384b0abd699a2c6bd5c6c9aaf5085f9e0947a6bce5f2a8fec933257fdcef7009a4b8e859c5e92ca5acb63ee385f21ebde8792e2
- SSDEEP 49152:8WJE2ZctEafitmGYj+uYP4D2VPrX97Jckdwi3N7+WTW3:tE2ZBaqaj+uYP4srrPdwi3Q
- TLSH T166852300B5D684B5E6F36B319979D5A08EF8FC301E249E9F53843A341A78680E939F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_68ccbd58e8d46160ab8558ad54934e87_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_68ccbd58e8d46160ab8558ad54934e87_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 26d4239d84a5b31635f88d77c621d969327795a21e28ca037d34200e0f71600d
- MD5 68ccbd58e8d46160ab8558ad54934e87
- SHA1 f51d7aed6ed43b40ca28ddb75c04d902cac01edd
- SHA512 d03bda93722c74ae51606001b384b0abd699a2c6bd5c6c9aaf5085f9e0947a6bce5f2a8fec933257fdcef7009a4b8e859c5e92ca5acb63ee385f21ebde8792e2
- SSDEEP 49152:8WJE2ZctEafitmGYj+uYP4D2VPrX97Jckdwi3N7+WTW3:tE2ZBaqaj+uYP4srrPdwi3Q
- TLSH T166852300B5D684B5E6F36B319979D5A08EF8FC301E249E9F53843A341A78680E939F77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1