General
- Target 2026-08-17_15e613a569da60e8db6d26d60712a280_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260817-d9215aej7w
- SHA256 63e4734538f3a67ec5946e04921d02f35b62deb7d0b264a0626b2e0fe550bcf9
- MD5 15e613a569da60e8db6d26d60712a280
- SHA1 64237498f66e79fd8ee11973dea4d597bf195e0e
- SHA512 b1016ab68eba1766565f6b9d1420f63c3fe9c796a26cf15b5e1a4de6152f58f4caf4afbabe7db9e7259071e7cdbbc19ac20147a6f24371a67cb86feaaaf2de11
- SSDEEP 49152:QWJE2ZctEafitmGYj+uYP4D2VPrXC91+BET3P:xE2ZBaqaj+uYP4sr61+BQ
- TLSH T15095231075D5D4B6E7B31B746879C5A00EFCFC714A248E9F53846E392E74A80E838BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_15e613a569da60e8db6d26d60712a280_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_15e613a569da60e8db6d26d60712a280_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 63e4734538f3a67ec5946e04921d02f35b62deb7d0b264a0626b2e0fe550bcf9
- MD5 15e613a569da60e8db6d26d60712a280
- SHA1 64237498f66e79fd8ee11973dea4d597bf195e0e
- SHA512 b1016ab68eba1766565f6b9d1420f63c3fe9c796a26cf15b5e1a4de6152f58f4caf4afbabe7db9e7259071e7cdbbc19ac20147a6f24371a67cb86feaaaf2de11
- SSDEEP 49152:QWJE2ZctEafitmGYj+uYP4D2VPrXC91+BET3P:xE2ZBaqaj+uYP4sr61+BQ
- TLSH T15095231075D5D4B6E7B31B746879C5A00EFCFC714A248E9F53846E392E74A80E838BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1