General
- Target 2026-08-13_a858552b7287e328e8205ccbb030e73a_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260813-t29c8stgnc
- SHA256 0507280c4de67830572fe2b06491848d35da8c1d2cbe41a03cd6ac992dbb0eb0
- MD5 a858552b7287e328e8205ccbb030e73a
- SHA1 8997bd38831cc6a22b34691e963bbe627a47700c
- SHA512 5ef67ebc9ff4666b4f3560154426dcf29d0809f8d8285fd9704b0bc241e50718099f86c1e711009955048ef339335e275a425f31c7673a1e78f18f8e5d719d1c
- SSDEEP 49152:nWJE2ZctEafitmGYj+uYP4D2VPrXSKH0XiaaK6h:YE2ZBaqaj+uYP4srCbyD
- TLSH T12695230435E2D4B5EBB11E31A979C5B05EB9FC301D684A9F23443A395EB89C0E939B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_a858552b7287e328e8205ccbb030e73a_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_a858552b7287e328e8205ccbb030e73a_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 0507280c4de67830572fe2b06491848d35da8c1d2cbe41a03cd6ac992dbb0eb0
- MD5 a858552b7287e328e8205ccbb030e73a
- SHA1 8997bd38831cc6a22b34691e963bbe627a47700c
- SHA512 5ef67ebc9ff4666b4f3560154426dcf29d0809f8d8285fd9704b0bc241e50718099f86c1e711009955048ef339335e275a425f31c7673a1e78f18f8e5d719d1c
- SSDEEP 49152:nWJE2ZctEafitmGYj+uYP4D2VPrXSKH0XiaaK6h:YE2ZBaqaj+uYP4srCbyD
- TLSH T12695230435E2D4B5EBB11E31A979C5B05EB9FC301D684A9F23443A395EB89C0E939B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1