General
- Target 2026-08-07_29ecf51c9df102e0f3ed2bb09fab7c2f_amadey_elex_hellokitty_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop_vidar
- Size 4.5MB
- Sample260808-b3lpfsfn5w
- SHA256 9b12b01ed86b50d6e33db8c6c6bc21df2cc1fd7711fb69c45d131f52f0dd0aa3
- MD5 29ecf51c9df102e0f3ed2bb09fab7c2f
- SHA1 f2c2c4ce3b68d40316d98e04b37d0e0fe224c321
- SHA512 015f8893dc0250c7e1dfeadc27d43c0b33307ce125ddd681c7caebba61d2648767572e5e4216ca6252f467fb9972036f580340e0ff30ffd557bf9a5f84606be0
- SSDEEP 98304:BdkvJE2UgXq9ouFkULGyqobNq1MBO4q75Av7fbUhabgf:BqE2S9+ULdNxO4q7+zUhasf
- TLSH T128268D35FFD48072D436523288A4A699EA76F8213B148FCF13D5570E9E2A6C37D31E29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_29ecf51c9df102e0f3ed2bb09fab7c2f_amadey_elex_hellokitty_luca-stealer_njrat_redline-steale.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_29ecf51c9df102e0f3ed2bb09fab7c2f_amadey_elex_hellokitty_luca-stealer_njrat_redline-steale.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_29ecf51c9df102e0f3ed2bb09fab7c2f_amadey_elex_hellokitty_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop_vidar
- Size 4.5MB
- SHA256 9b12b01ed86b50d6e33db8c6c6bc21df2cc1fd7711fb69c45d131f52f0dd0aa3
- MD5 29ecf51c9df102e0f3ed2bb09fab7c2f
- SHA1 f2c2c4ce3b68d40316d98e04b37d0e0fe224c321
- SHA512 015f8893dc0250c7e1dfeadc27d43c0b33307ce125ddd681c7caebba61d2648767572e5e4216ca6252f467fb9972036f580340e0ff30ffd557bf9a5f84606be0
- SSDEEP 98304:BdkvJE2UgXq9ouFkULGyqobNq1MBO4q75Av7fbUhabgf:BqE2S9+ULdNxO4q7+zUhasf
- TLSH T128268D35FFD48072D436523288A4A699EA76F8213B148FCF13D5570E9E2A6C37D31E29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory