General
- Target 2026-08-18_134a8b24a417f1a5145667471b2b9cea_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260818-1fq34abf36
- SHA256 874c30221d2b64d709496720ab17e535fbd76b97238fcf382122b80f06a54ea2
- MD5 134a8b24a417f1a5145667471b2b9cea
- SHA1 b1d37430ec6717b36991c9d643ae2f92d7e61138
- SHA512 0b8893c36ad9f93268775837cbd70f7e00ee8cfe5dfe712135000878e8829bb2bae322bb15752930b3a14a46419fc229583f54f8b11fdefb03fca846d61345b0
- SSDEEP 49152:2WJE2ZctEafitmGYj+uYP4D2VPrXxPzqvw:rE2ZBaqaj+uYP4srxzYw
- TLSH T15285231175E2C8B5EBF21A3199B5D5604EFCF8301E688ADF53C83D291E78680E934B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_134a8b24a417f1a5145667471b2b9cea_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_134a8b24a417f1a5145667471b2b9cea_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 874c30221d2b64d709496720ab17e535fbd76b97238fcf382122b80f06a54ea2
- MD5 134a8b24a417f1a5145667471b2b9cea
- SHA1 b1d37430ec6717b36991c9d643ae2f92d7e61138
- SHA512 0b8893c36ad9f93268775837cbd70f7e00ee8cfe5dfe712135000878e8829bb2bae322bb15752930b3a14a46419fc229583f54f8b11fdefb03fca846d61345b0
- SSDEEP 49152:2WJE2ZctEafitmGYj+uYP4D2VPrXxPzqvw:rE2ZBaqaj+uYP4srxzYw
- TLSH T15285231175E2C8B5EBF21A3199B5D5604EFCF8301E688ADF53C83D291E78680E934B97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1