General
- Target 2026-08-07_23bf24aee6c87d063c3925f1e8ffff71_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.6MB
- Sample260807-n4631avcmf
- SHA256 f61a3a5d31454fbdacde26d9591d3f04038136c2d83ba81103b884049145d4a7
- MD5 23bf24aee6c87d063c3925f1e8ffff71
- SHA1 d7d7b78605ca7aa1aaf700ea4779f44d25e22848
- SHA512 92ac125d4cd300067c50cb722c98aed06b9afffd32c5145265d8147597ede85eb4a780544d6761db7c90b3a2826530c61a43875c8feb4d6b4138102dff542366
- SSDEEP 24576:pYJ9bS8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:pYJtSgDUYmvFur31yAipQCtXxc0H
- TLSH T15675023575C190B3EA73053049FCE2B19A3DFDB15F158DEB63A42B6A0A306D0D938A67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_23bf24aee6c87d063c3925f1e8ffff71_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_23bf24aee6c87d063c3925f1e8ffff71_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.6MB
- SHA256 f61a3a5d31454fbdacde26d9591d3f04038136c2d83ba81103b884049145d4a7
- MD5 23bf24aee6c87d063c3925f1e8ffff71
- SHA1 d7d7b78605ca7aa1aaf700ea4779f44d25e22848
- SHA512 92ac125d4cd300067c50cb722c98aed06b9afffd32c5145265d8147597ede85eb4a780544d6761db7c90b3a2826530c61a43875c8feb4d6b4138102dff542366
- SSDEEP 24576:pYJ9bS8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:pYJtSgDUYmvFur31yAipQCtXxc0H
- TLSH T15675023575C190B3EA73053049FCE2B19A3DFDB15F158DEB63A42B6A0A306D0D938A67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1