General
- Target 2026-08-07_b12ebfd453d8310ea0918161680d8dc8_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260807-sxpmla1thz
- SHA256 12c0bd5452abb30a1fcc19f35c7acc1d9589fc01055b50cfdf9f838b2d1f1c06
- MD5 b12ebfd453d8310ea0918161680d8dc8
- SHA1 9b7a793836c444d5637fa3b7d5e8e12e0a2652b7
- SHA512 17e8d0a59d2ca0ca738ba178800df503f0b0e34e101815b5d1c61ed5102a71018138eaedde7aac27d2ab9bf08dbc9be04d93e504a9873b8b69cd201cef6930cd
- SSDEEP 12288:uUYJ9bi+GyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWs:fYJ9bTnQ/tbw/2Mkjy6Fr7g0os
- TLSH T12E65013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_b12ebfd453d8310ea0918161680d8dc8_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_b12ebfd453d8310ea0918161680d8dc8_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 12c0bd5452abb30a1fcc19f35c7acc1d9589fc01055b50cfdf9f838b2d1f1c06
- MD5 b12ebfd453d8310ea0918161680d8dc8
- SHA1 9b7a793836c444d5637fa3b7d5e8e12e0a2652b7
- SHA512 17e8d0a59d2ca0ca738ba178800df503f0b0e34e101815b5d1c61ed5102a71018138eaedde7aac27d2ab9bf08dbc9be04d93e504a9873b8b69cd201cef6930cd
- SSDEEP 12288:uUYJ9bi+GyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWs:fYJ9bTnQ/tbw/2Mkjy6Fr7g0os
- TLSH T12E65013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1