General
- Target 2026-08-03_33384d8d29342c6f1ecb46e0acde8366_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260804-pp4vrswydx
- SHA256 3cf95ffeaaceb698ec1fbaf3f8e126bc0107deddb2eec9f57150ff127a2c2ab8
- MD5 33384d8d29342c6f1ecb46e0acde8366
- SHA1 9bf50f2507e1c2ea16bb814fbdcf419cf4ebecf6
- SHA512 a9d67bdbede32f08b786d40c6c26f697f722ad5c6108399106c833194d877f102d08285e37782a47b239de4b8e36827f721c8e9c729dcf3f31b801b53320690a
- SSDEEP 49152:2WJE2ZctEafitmGYj+uYP4D2VPrXzMgKK+zov+yEIP8v4b0/:rE2ZBaqaj+uYP4sroJK+zkIwg
- TLSH T1F795230175E690B4E6F21F7599BAC5604FBCFC304E248A9F93943A392F78580E935B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_33384d8d29342c6f1ecb46e0acde8366_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_33384d8d29342c6f1ecb46e0acde8366_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 3cf95ffeaaceb698ec1fbaf3f8e126bc0107deddb2eec9f57150ff127a2c2ab8
- MD5 33384d8d29342c6f1ecb46e0acde8366
- SHA1 9bf50f2507e1c2ea16bb814fbdcf419cf4ebecf6
- SHA512 a9d67bdbede32f08b786d40c6c26f697f722ad5c6108399106c833194d877f102d08285e37782a47b239de4b8e36827f721c8e9c729dcf3f31b801b53320690a
- SSDEEP 49152:2WJE2ZctEafitmGYj+uYP4D2VPrXzMgKK+zov+yEIP8v4b0/:rE2ZBaqaj+uYP4sroJK+zkIwg
- TLSH T1F795230175E690B4E6F21F7599BAC5604FBCFC304E248A9F93943A392F78580E935B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1