General
- Target 2026-08-08_cc5c651a56d5c354745a565383a383c3_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260809-aden6ser5v
- SHA256 feb80d0579c0a3f3ab49122c8e5d28762ef352c90c93c9ab65f1bbf28027c049
- MD5 cc5c651a56d5c354745a565383a383c3
- SHA1 5d44ae72bf8aa0b6614d162446c3d042704749b2
- SHA512 82267e4f5b9cc7c0eb376d196589699f4d4c9de97fe6fded2182e819216defae5e6e702bc0d05145847f3e1e37364b285f412005825dd1f4e5d26a3f6d7af73c
- SSDEEP 24576:GYJ9b7/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:GYJt7LNiXicJFFRGNzj3
- TLSH T1CF65026171C084B2EAB704350AB89671AA7CFD354F2548EBA3943B6E5A347D1CE38773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_cc5c651a56d5c354745a565383a383c3_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_cc5c651a56d5c354745a565383a383c3_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 feb80d0579c0a3f3ab49122c8e5d28762ef352c90c93c9ab65f1bbf28027c049
- MD5 cc5c651a56d5c354745a565383a383c3
- SHA1 5d44ae72bf8aa0b6614d162446c3d042704749b2
- SHA512 82267e4f5b9cc7c0eb376d196589699f4d4c9de97fe6fded2182e819216defae5e6e702bc0d05145847f3e1e37364b285f412005825dd1f4e5d26a3f6d7af73c
- SSDEEP 24576:GYJ9b7/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:GYJt7LNiXicJFFRGNzj3
- TLSH T1CF65026171C084B2EAB704350AB89671AA7CFD354F2548EBA3943B6E5A347D1CE38773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1