General
- Target 2026-08-03_31d6bd45d931941b04e64f14fd1c87d2_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260804-pqvngsep2x
- SHA256 2e05f18ec22a19aa1ed9e543020b2de3ba346886605b53f7c9cdb6f565ac6c78
- MD5 31d6bd45d931941b04e64f14fd1c87d2
- SHA1 282e0f75e44dce0ca0d281e29a27e27142cd9504
- SHA512 abc1722264eab73bf1f75bef9169440bb5c6d1a36e33274292da9b0b728c6e46314bb4847e90297c998e7271f710cbe38a70d9f0bcc4ffdf0070fd0b0b60069c
- SSDEEP 49152:0WJE2ZctEafitmGYj+uYP4D2VPrXpGvb5fnUKy:lE2ZBaqaj+uYP4srZGVfnU
- TLSH T15085231175E6D075E6B21B30597AE5A04EB8FC700E748DEF53847A291EB4680F838BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_31d6bd45d931941b04e64f14fd1c87d2_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_31d6bd45d931941b04e64f14fd1c87d2_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 2e05f18ec22a19aa1ed9e543020b2de3ba346886605b53f7c9cdb6f565ac6c78
- MD5 31d6bd45d931941b04e64f14fd1c87d2
- SHA1 282e0f75e44dce0ca0d281e29a27e27142cd9504
- SHA512 abc1722264eab73bf1f75bef9169440bb5c6d1a36e33274292da9b0b728c6e46314bb4847e90297c998e7271f710cbe38a70d9f0bcc4ffdf0070fd0b0b60069c
- SSDEEP 49152:0WJE2ZctEafitmGYj+uYP4D2VPrXpGvb5fnUKy:lE2ZBaqaj+uYP4srZGVfnU
- TLSH T15085231175E6D075E6B21B30597AE5A04EB8FC700E748DEF53847A291EB4680F838BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1