General
- Target 2026-08-04_c9640ce801942e7efccd382296268e5d_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260804-wtwhhswhpb
- SHA256 8759df24174ed6bc8b8f7b09fd54a448fd151e94241703ca290cd3ad52ddf24b
- MD5 c9640ce801942e7efccd382296268e5d
- SHA1 f84e8d25ddf7582d197698b8f7a19c5b6a2dc6e9
- SHA512 ed2b153f94351e2610b30e73f2dd5f4256b1c7f4511c5e763289f3990f62df495d316af11e6e415d98d4d4bf42e0ca2fc3c0ea784adf77137c67218587e6fd0e
- SSDEEP 12288:DUYJ9bi+GyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW5:QYJ9bvnQ/tbw/2Mkjy6Fr7g0o5
- TLSH T14965013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_c9640ce801942e7efccd382296268e5d_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_c9640ce801942e7efccd382296268e5d_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 8759df24174ed6bc8b8f7b09fd54a448fd151e94241703ca290cd3ad52ddf24b
- MD5 c9640ce801942e7efccd382296268e5d
- SHA1 f84e8d25ddf7582d197698b8f7a19c5b6a2dc6e9
- SHA512 ed2b153f94351e2610b30e73f2dd5f4256b1c7f4511c5e763289f3990f62df495d316af11e6e415d98d4d4bf42e0ca2fc3c0ea784adf77137c67218587e6fd0e
- SSDEEP 12288:DUYJ9bi+GyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMW5:QYJ9bvnQ/tbw/2Mkjy6Fr7g0o5
- TLSH T14965013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1