General
- Target 2026-08-03_4447dfd026fba251f65b9692f30cc692_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260804-pd9a4sek5t
- SHA256 3b5b3e666db513a4e44572c35d150855cce421ba56ec24bae8669c707eaf794f
- MD5 4447dfd026fba251f65b9692f30cc692
- SHA1 0b73c1bec5280388de15d1cb3a364d1de6963d0f
- SHA512 822123cf35da51bac371a0b1ffdff1570f38c15f2b76cb7ef44ca3a2ec8a4aaa719126db20b307d4f4b6a9892a443fbc3d8c163b0d1916814a980b0870909c5b
- SSDEEP 49152:NWJE2ZctEafitmGYj+uYP4D2VPrXecV2jYirPAIf:iE2ZBaqaj+uYP4srQz
- TLSH T11585231175E5C4B5F6B21B71A876C1A14FBCFC304F644CAF53982A281EB4980E879FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_4447dfd026fba251f65b9692f30cc692_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_4447dfd026fba251f65b9692f30cc692_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 3b5b3e666db513a4e44572c35d150855cce421ba56ec24bae8669c707eaf794f
- MD5 4447dfd026fba251f65b9692f30cc692
- SHA1 0b73c1bec5280388de15d1cb3a364d1de6963d0f
- SHA512 822123cf35da51bac371a0b1ffdff1570f38c15f2b76cb7ef44ca3a2ec8a4aaa719126db20b307d4f4b6a9892a443fbc3d8c163b0d1916814a980b0870909c5b
- SSDEEP 49152:NWJE2ZctEafitmGYj+uYP4D2VPrXecV2jYirPAIf:iE2ZBaqaj+uYP4srQz
- TLSH T11585231175E5C4B5F6B21B71A876C1A14FBCFC304F644CAF53982A281EB4980E879FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1