General
- Target 2026-08-14_858f282843ae38de9f08a5446025eb01_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.4MB
- Sample260814-qgpljsck31
- SHA256 0302f90d83c89c127340c2e72296888860fdbac5d167c20b985932623788f6bb
- MD5 858f282843ae38de9f08a5446025eb01
- SHA1 75fcda09627fff87c079889eb22406e114e038ee
- SHA512 d903a2bc853ac7a37c0b0a5003e72bc7d689ab4749dc87a92beae02334a1c04dca5ad7c9339bb1cd0d0b7008e3cb6b5d7b27dc32255348b39fefaa88c40cb04a
- SSDEEP 12288:cImGUcsvZZdubv7u2l3zGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWz:cxGBcslTnQ/tbw/2Mkjy6Fr7g0oz
- TLSH T1DB65012132D0D4B7E973093049B1CAA16A3EEE702FA49ADF7384172E5E743D14A39767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_858f282843ae38de9f08a5446025eb01_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_858f282843ae38de9f08a5446025eb01_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.4MB
- SHA256 0302f90d83c89c127340c2e72296888860fdbac5d167c20b985932623788f6bb
- MD5 858f282843ae38de9f08a5446025eb01
- SHA1 75fcda09627fff87c079889eb22406e114e038ee
- SHA512 d903a2bc853ac7a37c0b0a5003e72bc7d689ab4749dc87a92beae02334a1c04dca5ad7c9339bb1cd0d0b7008e3cb6b5d7b27dc32255348b39fefaa88c40cb04a
- SSDEEP 12288:cImGUcsvZZdubv7u2l3zGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWz:cxGBcslTnQ/tbw/2Mkjy6Fr7g0oz
- TLSH T1DB65012132D0D4B7E973093049B1CAA16A3EEE702FA49ADF7384172E5E743D14A39767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1