General
- Target 2026-08-05_7f68c9521cdd7e8106d93082d27c3ef4_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260806-cnm5ea1frc
- SHA256 eab2516f3084ce382c9a75bda1f18f789c78f811734c50c6e8d7dc28c037e2cf
- MD5 7f68c9521cdd7e8106d93082d27c3ef4
- SHA1 fc1dabf4025b19c365acf7fd9f5a4e6664d3155a
- SHA512 42b68226f71f11e0ba7d121bfcf47294be68562a72a38bf54a1a8f7de929a3e720e3ccf09ba39d466787e05ebb88808de013e7dccec8a7e8c264b14a1c4e4f74
- SSDEEP 49152:7WJE2ZctEafitmGYj+uYP4D2VPrXIwkF73UaEcWFQ:8E2ZBaqaj+uYP4sr5W3Zz0Q
- TLSH T129852301B5D5D074FAB36A35AC79C9540BF9FC301A3459EF63882E291F78A40E538BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_7f68c9521cdd7e8106d93082d27c3ef4_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_7f68c9521cdd7e8106d93082d27c3ef4_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 eab2516f3084ce382c9a75bda1f18f789c78f811734c50c6e8d7dc28c037e2cf
- MD5 7f68c9521cdd7e8106d93082d27c3ef4
- SHA1 fc1dabf4025b19c365acf7fd9f5a4e6664d3155a
- SHA512 42b68226f71f11e0ba7d121bfcf47294be68562a72a38bf54a1a8f7de929a3e720e3ccf09ba39d466787e05ebb88808de013e7dccec8a7e8c264b14a1c4e4f74
- SSDEEP 49152:7WJE2ZctEafitmGYj+uYP4D2VPrXIwkF73UaEcWFQ:8E2ZBaqaj+uYP4sr5W3Zz0Q
- TLSH T129852301B5D5D074FAB36A35AC79C9540BF9FC301A3459EF63882E291F78A40E538BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1