General
- Target 2026-08-17_f24562d959dcb5437903abbd3024d767_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260817-fatltael5y
- SHA256 8961458f3b6f553decbd0a70cf796933ede4b1d2c849fa5a3f77659c95d37d2b
- MD5 f24562d959dcb5437903abbd3024d767
- SHA1 b31973903e8ce9421dff0ece1ff1c5a26d6fc184
- SHA512 cc861cff4c6bda0035bfe28aa7e9b684c047f9f4731b390b19be16a9e54c7576a09bba3aedef5e60900babea59f45748c2754d2c358db1a432d808a788fd6edb
- SSDEEP 49152:nWJE2ZctEafitmGYj+uYP4D2VPrXhQcrKL4A7Q1Ur:YE2ZBaqaj+uYP4srOIY5SUr
- TLSH T18885231476D5C4B4EAF26B3498A6D8704EB8FC704A348ADF53C87A351FB4580D539BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_f24562d959dcb5437903abbd3024d767_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_f24562d959dcb5437903abbd3024d767_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 8961458f3b6f553decbd0a70cf796933ede4b1d2c849fa5a3f77659c95d37d2b
- MD5 f24562d959dcb5437903abbd3024d767
- SHA1 b31973903e8ce9421dff0ece1ff1c5a26d6fc184
- SHA512 cc861cff4c6bda0035bfe28aa7e9b684c047f9f4731b390b19be16a9e54c7576a09bba3aedef5e60900babea59f45748c2754d2c358db1a432d808a788fd6edb
- SSDEEP 49152:nWJE2ZctEafitmGYj+uYP4D2VPrXhQcrKL4A7Q1Ur:YE2ZBaqaj+uYP4srOIY5SUr
- TLSH T18885231476D5C4B4EAF26B3498A6D8704EB8FC704A348ADF53C87A351FB4580D539BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1