General
- Target 2026-08-07_333bf1a942706c252e8b29a80165f7bd_amadey_elex_hellokitty_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop_vidar
- Size 13.4MB
- Sample260808-bzv4qafm7v
- SHA256 626ce3cac8189ed584d7dca748e92ae4f360c278ffebae7e550e773efa18557d
- MD5 333bf1a942706c252e8b29a80165f7bd
- SHA1 a6059929bd95240c8297cd9dd25954c588748863
- SHA512 a63cab2ef98c69d50cd546a89326d3eff5231f210c304d0b9f19739e04736575e97ce35d5f374bfad0e0f0c0927e7e68cd6fa8759bb0b1543971ceb13233ef20
- SSDEEP 49152:BmrU3K+k8cJE2887eIqZBsEZUJK9DBjcc/FCPjDj8hXZLGyqocSV5Ljp0Uqf4jsJ:BdkvJE2UgXq9ouFkULGyqobNq1MWrU5e
- TLSH T188E63812F794C031D41A13329864825199A2FC2017258BFFEF78B62DEB7E5F26A3D671
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_333bf1a942706c252e8b29a80165f7bd_amadey_elex_hellokitty_luca-stealer_njrat_redline-steale.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_333bf1a942706c252e8b29a80165f7bd_amadey_elex_hellokitty_luca-stealer_njrat_redline-steale.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_333bf1a942706c252e8b29a80165f7bd_amadey_elex_hellokitty_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop_vidar
- Size 13.4MB
- SHA256 626ce3cac8189ed584d7dca748e92ae4f360c278ffebae7e550e773efa18557d
- MD5 333bf1a942706c252e8b29a80165f7bd
- SHA1 a6059929bd95240c8297cd9dd25954c588748863
- SHA512 a63cab2ef98c69d50cd546a89326d3eff5231f210c304d0b9f19739e04736575e97ce35d5f374bfad0e0f0c0927e7e68cd6fa8759bb0b1543971ceb13233ef20
- SSDEEP 49152:BmrU3K+k8cJE2887eIqZBsEZUJK9DBjcc/FCPjDj8hXZLGyqocSV5Ljp0Uqf4jsJ:BdkvJE2UgXq9ouFkULGyqobNq1MWrU5e
- TLSH T188E63812F794C031D41A13329864825199A2FC2017258BFFEF78B62DEB7E5F26A3D671
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory