General
- Target 2026-08-07_48d584d3d5a6d70c45ccc17239897369_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.7MB
- Sample260807-tnrahazala
- SHA256 a81435bc1eb31517f97fd5d15ba5206ee5364552d349c68067b1f01db568c4e8
- MD5 48d584d3d5a6d70c45ccc17239897369
- SHA1 b07cffd8806c01b1df88e249ad5347df6fe63c08
- SHA512 fcbc5db65e0f66cf546a25193201e3fbe7b2323de8bcf97191fbfda0ff9e5d8d63b2b0124aaea1bd216400e09af8b551d0bddfad5750072a93fe1c336f150564
- SSDEEP 12288:LUYJ9bipJNTpWSgN/wwRN0UL0G/TVOo3HC75nSE33b9YvFHQ:oYJ9bAdCN/j2GLl3iFSE33b99
- TLSH T126850230B6C1D4B2EAB7453506F8DA71963CFDB09F2148CB93912BEB5A346D08939673
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_48d584d3d5a6d70c45ccc17239897369_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_48d584d3d5a6d70c45ccc17239897369_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.7MB
- SHA256 a81435bc1eb31517f97fd5d15ba5206ee5364552d349c68067b1f01db568c4e8
- MD5 48d584d3d5a6d70c45ccc17239897369
- SHA1 b07cffd8806c01b1df88e249ad5347df6fe63c08
- SHA512 fcbc5db65e0f66cf546a25193201e3fbe7b2323de8bcf97191fbfda0ff9e5d8d63b2b0124aaea1bd216400e09af8b551d0bddfad5750072a93fe1c336f150564
- SSDEEP 12288:LUYJ9bipJNTpWSgN/wwRN0UL0G/TVOo3HC75nSE33b9YvFHQ:oYJ9bAdCN/j2GLl3iFSE33b99
- TLSH T126850230B6C1D4B2EAB7453506F8DA71963CFDB09F2148CB93912BEB5A346D08939673
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1