General
- Target 2026-08-30_f59094638cfd393cb78de57db72ccec9_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.3MB
- Sample260831-a1tfvaeb65
- SHA256 6308fc4b2f46b88739cc4bd58b35a09f16fc071b2dd75f017d7f8b3690fa9bac
- MD5 f59094638cfd393cb78de57db72ccec9
- SHA1 63cf27dbc0638229552bdcbe465ab2571615e1e3
- SHA512 0bc5a124d75839488e5440c8c1dacb221bfb561fae58e3149e5270ffb6c2516b6e97d004e84ce5f99cb67f08fd57644f13abdaf9cb1f5fc5d58da614d03d6b9b
- SSDEEP 12288:JgPrGxzQ9TA1ubv6IQ3mF8EfS+msn51nBwNccvKPC/pOhSyPaz1lNJY2yk5yTZvv:JgzGxmsdmf1GDvnYhSyyz1txyTZuy
- TLSH T1C755121236D084F3C5B30A3099B5EAB0593EFE301FB50AAB63D41B6B5D746D28D3466B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_f59094638cfd393cb78de57db72ccec9_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_f59094638cfd393cb78de57db72ccec9_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.3MB
- SHA256 6308fc4b2f46b88739cc4bd58b35a09f16fc071b2dd75f017d7f8b3690fa9bac
- MD5 f59094638cfd393cb78de57db72ccec9
- SHA1 63cf27dbc0638229552bdcbe465ab2571615e1e3
- SHA512 0bc5a124d75839488e5440c8c1dacb221bfb561fae58e3149e5270ffb6c2516b6e97d004e84ce5f99cb67f08fd57644f13abdaf9cb1f5fc5d58da614d03d6b9b
- SSDEEP 12288:JgPrGxzQ9TA1ubv6IQ3mF8EfS+msn51nBwNccvKPC/pOhSyPaz1lNJY2yk5yTZvv:JgzGxmsdmf1GDvnYhSyyz1txyTZuy
- TLSH T1C755121236D084F3C5B30A3099B5EAB0593EFE301FB50AAB63D41B6B5D746D28D3466B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1