General
- Target 2026-08-23_e1611bf651e204b8b53e44bbd6ce15e8_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.5MB
- Sample260823-wgf73ayerg
- SHA256 c9c8cdd1c1f7076319a6d63737ec82438dfb1b0ea9e2f2229996484a6a8ec5be
- MD5 e1611bf651e204b8b53e44bbd6ce15e8
- SHA1 4e0ea11249a6d6ad45140db789e0351f7b1fa138
- SHA512 6724f7cf81a0e84a18c92103190b91dffc5388b2f5b1fcab2c362fd8fe8f92021ef60a0f4149b261b410a7a7cd107d837e404c60a83c3c426ed387319e04cdbb
- SSDEEP 24576:XRuS338G38+N/KCtMZd0qgKWEfb0Le5ji0hmxNrMY:BZH848+N/KCGZd0qgNEfbPji0Aj1
- TLSH T1AA759D12F5E08276D077C079C6E6A67AED3274951B3099DB0385C7782E23BD19B36B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_e1611bf651e204b8b53e44bbd6ce15e8_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_e1611bf651e204b8b53e44bbd6ce15e8_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_e1611bf651e204b8b53e44bbd6ce15e8_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.5MB
- SHA256 c9c8cdd1c1f7076319a6d63737ec82438dfb1b0ea9e2f2229996484a6a8ec5be
- MD5 e1611bf651e204b8b53e44bbd6ce15e8
- SHA1 4e0ea11249a6d6ad45140db789e0351f7b1fa138
- SHA512 6724f7cf81a0e84a18c92103190b91dffc5388b2f5b1fcab2c362fd8fe8f92021ef60a0f4149b261b410a7a7cd107d837e404c60a83c3c426ed387319e04cdbb
- SSDEEP 24576:XRuS338G38+N/KCtMZd0qgKWEfb0Le5ji0hmxNrMY:BZH848+N/KCGZd0qgNEfbPji0Aj1
- TLSH T1AA759D12F5E08276D077C079C6E6A67AED3274951B3099DB0385C7782E23BD19B36B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory