General
- Target 2026-08-04_4e361dc739551c68761cd3b91947a546_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260805-bb1passvg1
- SHA256 6a2755c204a42fabe91a46b3f6ce2f02dd23750bbf977e42bc6e0a587d2c1f6b
- MD5 4e361dc739551c68761cd3b91947a546
- SHA1 ed5954b26fd918aab4edb62dc6c5ad9f7b635518
- SHA512 3b38016b1d026e518e265f88ce60d012668a4635f7aebd898b702e4e004b60d323ee0ac979c0c1149b6fc960dee2e98b4bf24d9a06a73aa4af9c0b3174ca402d
- SSDEEP 12288:JUYJ9biFGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWl:SYJ9bAnQ/tbw/2Mkjy6Fr7g0ol
- TLSH T15D65013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_4e361dc739551c68761cd3b91947a546_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_4e361dc739551c68761cd3b91947a546_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 6a2755c204a42fabe91a46b3f6ce2f02dd23750bbf977e42bc6e0a587d2c1f6b
- MD5 4e361dc739551c68761cd3b91947a546
- SHA1 ed5954b26fd918aab4edb62dc6c5ad9f7b635518
- SHA512 3b38016b1d026e518e265f88ce60d012668a4635f7aebd898b702e4e004b60d323ee0ac979c0c1149b6fc960dee2e98b4bf24d9a06a73aa4af9c0b3174ca402d
- SSDEEP 12288:JUYJ9biFGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWl:SYJ9bAnQ/tbw/2Mkjy6Fr7g0ol
- TLSH T15D65013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1