General
- Target 2026-08-09_bcee3b2406c4bac373e5b1f5f4a2f0df_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260809-q2fjda11fw
- SHA256 b2f9c5525deb6b5af71ad77479b5424d04055d42068b2c310f9f5d363b4df4e2
- MD5 bcee3b2406c4bac373e5b1f5f4a2f0df
- SHA1 8a2fec7f564cc7088da3a3b9fd15c9952e9a4fad
- SHA512 25f616c849895e13b1216995fa968467ab539b77d51b771a574db06e8868e7b4e01fb496826e4c586baaedae1811a0664fca1daa0ca51f621266c221ce23f94c
- SSDEEP 12288:qUYJ9bi6dyzLwb4qwxUyp+E3YkJact/Xr/LlrzXglt6aliOCXnc4EUJVE:rYJ9b7y4b4qo+QdJacNX9gHliOVeVE
- TLSH T1C765012473C284B2EA77093205B5EA71993CFD710F655AEF73913BAA9E301D08939763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_bcee3b2406c4bac373e5b1f5f4a2f0df_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_bcee3b2406c4bac373e5b1f5f4a2f0df_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 b2f9c5525deb6b5af71ad77479b5424d04055d42068b2c310f9f5d363b4df4e2
- MD5 bcee3b2406c4bac373e5b1f5f4a2f0df
- SHA1 8a2fec7f564cc7088da3a3b9fd15c9952e9a4fad
- SHA512 25f616c849895e13b1216995fa968467ab539b77d51b771a574db06e8868e7b4e01fb496826e4c586baaedae1811a0664fca1daa0ca51f621266c221ce23f94c
- SSDEEP 12288:qUYJ9bi6dyzLwb4qwxUyp+E3YkJact/Xr/LlrzXglt6aliOCXnc4EUJVE:rYJ9b7y4b4qo+QdJacNX9gHliOVeVE
- TLSH T1C765012473C284B2EA77093205B5EA71993CFD710F655AEF73913BAA9E301D08939763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1