General
- Target 2026-08-17_c36e614760dec8ed5dc19553fd9cf49d_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260817-caf4yaha35
- SHA256 9735752349452666ec8486a837b72b62a3f8d260a381572a639cacb3295d0be1
- MD5 c36e614760dec8ed5dc19553fd9cf49d
- SHA1 22299b7d9d3fb84617acc2d64183c0f1444f25b9
- SHA512 4fe6f870ca80216e01327a9153dbe76dc82548dae805130a4c01b332a34be1a8f6eb89609b6c95292be80916af75fde7478d105b967a96c2d174db10d97daad6
- SSDEEP 49152:MWJE2ZctEafitmGYj+uYP4D2VPrXgpaZtGRddKEHX:9E2ZBaqaj+uYP4srQgtsx
- TLSH T13D952301B9D690B5E7F52B75AEB9C5A00EF8FC200A644ECF63847D295FB4580E439B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_c36e614760dec8ed5dc19553fd9cf49d_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_c36e614760dec8ed5dc19553fd9cf49d_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 9735752349452666ec8486a837b72b62a3f8d260a381572a639cacb3295d0be1
- MD5 c36e614760dec8ed5dc19553fd9cf49d
- SHA1 22299b7d9d3fb84617acc2d64183c0f1444f25b9
- SHA512 4fe6f870ca80216e01327a9153dbe76dc82548dae805130a4c01b332a34be1a8f6eb89609b6c95292be80916af75fde7478d105b967a96c2d174db10d97daad6
- SSDEEP 49152:MWJE2ZctEafitmGYj+uYP4D2VPrXgpaZtGRddKEHX:9E2ZBaqaj+uYP4srQgtsx
- TLSH T13D952301B9D690B5E7F52B75AEB9C5A00EF8FC200A644ECF63847D295FB4580E439B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1