General
- Target 2026-08-09_6cf8ac73f3b3e5926312448bb4eb2977_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260809-t5n7gavvdt
- SHA256 64d5022e5acc7d5cc894efd44577d1d418e6d3b239836d61ccbdd47f79d73ecc
- MD5 6cf8ac73f3b3e5926312448bb4eb2977
- SHA1 58540e98faeb75c9c4b7a7548b3984558472aa32
- SHA512 b87a99eaa1d5f0d750c33857af113fcf087cc5a3a1c456a21760f0b891e9583c95b025ca1570e87078e37c5a2a4c14c3292f70a957dd147497ebd14e38ee8185
- SSDEEP 12288:uUYJ9bijGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWz:fYJ9bKnQ/tbw/2Mkjy6Fr7g0oz
- TLSH T15465013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_6cf8ac73f3b3e5926312448bb4eb2977_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_6cf8ac73f3b3e5926312448bb4eb2977_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 64d5022e5acc7d5cc894efd44577d1d418e6d3b239836d61ccbdd47f79d73ecc
- MD5 6cf8ac73f3b3e5926312448bb4eb2977
- SHA1 58540e98faeb75c9c4b7a7548b3984558472aa32
- SHA512 b87a99eaa1d5f0d750c33857af113fcf087cc5a3a1c456a21760f0b891e9583c95b025ca1570e87078e37c5a2a4c14c3292f70a957dd147497ebd14e38ee8185
- SSDEEP 12288:uUYJ9bijGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWz:fYJ9bKnQ/tbw/2Mkjy6Fr7g0oz
- TLSH T15465013576C0D4B3EA73053108E4D6719A3EEDB25F609ADF6384276A5E343D08A397A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1