General
- Target 2026-08-12_c02fcacdb2378171bee4b0b9e1d2f299_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260812-wasyaack8t
- SHA256 bca82752a37896f5fbf91fa77dd39d035295a53e8ab5bb0826b8c9df6528de9b
- MD5 c02fcacdb2378171bee4b0b9e1d2f299
- SHA1 3e56e5e934d0d0e3703284afb788ff4515097ffd
- SHA512 5c5013a943ad0a30b77b23468ad1bd771d8102f08c41e457ef95ed3147dfdaf0c7d4b65872301e5a950bc7b692d037df9a0ca2c091eb0fd7b91f1d2b9cf41756
- SSDEEP 49152:bWJE2ZctEafitmGYj+uYP4D2VPrXVt8X1wD5fW:cE2ZBaqaj+uYP4srlY1of
- TLSH T1A2852311B6C5D474F6FA1B31A9A5CAB04BB9FC2059344A9F539439295FBC480E838FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_c02fcacdb2378171bee4b0b9e1d2f299_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_c02fcacdb2378171bee4b0b9e1d2f299_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 bca82752a37896f5fbf91fa77dd39d035295a53e8ab5bb0826b8c9df6528de9b
- MD5 c02fcacdb2378171bee4b0b9e1d2f299
- SHA1 3e56e5e934d0d0e3703284afb788ff4515097ffd
- SHA512 5c5013a943ad0a30b77b23468ad1bd771d8102f08c41e457ef95ed3147dfdaf0c7d4b65872301e5a950bc7b692d037df9a0ca2c091eb0fd7b91f1d2b9cf41756
- SSDEEP 49152:bWJE2ZctEafitmGYj+uYP4D2VPrXVt8X1wD5fW:cE2ZBaqaj+uYP4srlY1of
- TLSH T1A2852311B6C5D474F6FA1B31A9A5CAB04BB9FC2059344A9F539439295FBC480E838FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1