General
- Target 2026-08-16_f6aeb5e57009465212f1861b4700a54a_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- Sample260816-lejkascd83
- SHA256 511d33fbaec9789479412523ee5ff107729ed397ddde30d6b4769ebf37772a88
- MD5 f6aeb5e57009465212f1861b4700a54a
- SHA1 8f1b3a0258556ec464fa22ef0ec51703d2d08004
- SHA512 0a3c3fc1bf316a5a96ab1c502f58e5ba29091e30a845d6dcd22711146bcb53e07566a9dfc6ba3bd878128a210508144dbebaf603307e3aeebfdca8a5408ec6de
- SSDEEP 24576:2YJ9bW/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:2YJtWLNiXicJFFRGNzj3
- TLSH T14365026171C184B2EAB704350AB89670AA7CFD354F2548EBA3943B6E5A347D1CE38773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_f6aeb5e57009465212f1861b4700a54a_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_f6aeb5e57009465212f1861b4700a54a_amadey_elex_hellokitty_luca-stealer_njrat_play
- Size 1.4MB
- SHA256 511d33fbaec9789479412523ee5ff107729ed397ddde30d6b4769ebf37772a88
- MD5 f6aeb5e57009465212f1861b4700a54a
- SHA1 8f1b3a0258556ec464fa22ef0ec51703d2d08004
- SHA512 0a3c3fc1bf316a5a96ab1c502f58e5ba29091e30a845d6dcd22711146bcb53e07566a9dfc6ba3bd878128a210508144dbebaf603307e3aeebfdca8a5408ec6de
- SSDEEP 24576:2YJ9bW/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:2YJtWLNiXicJFFRGNzj3
- TLSH T14365026171C184B2EAB704350AB89670AA7CFD354F2548EBA3943B6E5A347D1CE38773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1