General
- Target 2026-08-15_92ae6c20ace9036fb6b87e2af533bbd3_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260815-sge38ayelf
- SHA256 21c3a27090de96de1a437e0ea4cef39db21046c32aa3f5fd54deda9ae614632f
- MD5 92ae6c20ace9036fb6b87e2af533bbd3
- SHA1 325fc98332d33f1daf7e065aea34d5a653d41da9
- SHA512 f4fb4e4c031f55b01a5d824ee2c51a94cf13b37cb0ff4b4b163139a14609aca479bb13dff26338f7b338e8a6a4c54422a243d5acdfa6f1452aefff98b26f5794
- SSDEEP 49152:2WJE2ZctEafitmGYj+uYP4D2VPrXAvDrZ6TwX7SknHOPAhr:rE2ZBaqaj+uYP4srir88X7SkHOPAhr
- TLSH T101852301BAE5C4B4D6B22B70A878C5A40AB9FC305A748EDF5354393D0B74581EA39FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_92ae6c20ace9036fb6b87e2af533bbd3_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_92ae6c20ace9036fb6b87e2af533bbd3_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 21c3a27090de96de1a437e0ea4cef39db21046c32aa3f5fd54deda9ae614632f
- MD5 92ae6c20ace9036fb6b87e2af533bbd3
- SHA1 325fc98332d33f1daf7e065aea34d5a653d41da9
- SHA512 f4fb4e4c031f55b01a5d824ee2c51a94cf13b37cb0ff4b4b163139a14609aca479bb13dff26338f7b338e8a6a4c54422a243d5acdfa6f1452aefff98b26f5794
- SSDEEP 49152:2WJE2ZctEafitmGYj+uYP4D2VPrXAvDrZ6TwX7SknHOPAhr:rE2ZBaqaj+uYP4srir88X7SkHOPAhr
- TLSH T101852301BAE5C4B4D6B22B70A878C5A40AB9FC305A748EDF5354393D0B74581EA39FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1