General
- Target 2026-08-07_2d034f59e0d414240c64bab9a8d8664c_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- Sample260807-rmj4pazwat
- SHA256 a1f2b1043ca2810ddd1b7c43537e3c5b4da6dba6ea4940720722349f4190a489
- MD5 2d034f59e0d414240c64bab9a8d8664c
- SHA1 cb910724d764f70bb3a211c834b0aff0bf7dfa76
- SHA512 ed149ce8705974fb53b8858352baa43df74fee5656dbf2a49c1e958fb1da9baa65ee234ae89509350d20ed63cd8e60b3e12582b3d09adbfa5947a1b13d3492a5
- SSDEEP 12288:3UYJ9biXXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:kYJ9bqsqjnhMgeiCl7G0nehbGZpbD
- TLSH T1D555027572C080B3DA73043146F8E675983EFD725F2048DB67966BAEAE701D08A39763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_2d034f59e0d414240c64bab9a8d8664c_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_2d034f59e0d414240c64bab9a8d8664c_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.3MB
- SHA256 a1f2b1043ca2810ddd1b7c43537e3c5b4da6dba6ea4940720722349f4190a489
- MD5 2d034f59e0d414240c64bab9a8d8664c
- SHA1 cb910724d764f70bb3a211c834b0aff0bf7dfa76
- SHA512 ed149ce8705974fb53b8858352baa43df74fee5656dbf2a49c1e958fb1da9baa65ee234ae89509350d20ed63cd8e60b3e12582b3d09adbfa5947a1b13d3492a5
- SSDEEP 12288:3UYJ9biXXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:kYJ9bqsqjnhMgeiCl7G0nehbGZpbD
- TLSH T1D555027572C080B3DA73043146F8E675983EFD725F2048DB67966BAEAE701D08A39763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1