General
- Target 2026-09-10_a7ec57c4a80872b784fb780ce032340d_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 51.6MB
- Sample260910-pmkn4swycs
- SHA256 229c06b985b1033a5c3737bdcbb83dd33fa9ccbfaf47d35c10b2f8980d444bb2
- MD5 a7ec57c4a80872b784fb780ce032340d
- SHA1 ae1cc7a0bf393e682ebdbf727c5fdb61bc0d518c
- SHA512 4026dda67bc1789901850c125c51b45a8fd8cfd8e1d29bfff63d04fa8f1e564ad2f49e4103a932434cd466ee071b01c8d3ac7fc2b232d208bc76b8cd84fe1e3f
- SSDEEP 786432:Cz4rE3ZObqzz2kxgfRZQbAjdGNOmGCDGo+XyhydA1cM2YkQOgUFw:s4o3Z72kxSZe2sNxxayhyil2Ykgy
- TLSH T1A2C7DFA3D0134B14EBD60A7ADAD138041D98B01EFFA869EF354C9C85E2A37C176B17B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_a7ec57c4a80872b784fb780ce032340d_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_a7ec57c4a80872b784fb780ce032340d_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_a7ec57c4a80872b784fb780ce032340d_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 51.6MB
- SHA256 229c06b985b1033a5c3737bdcbb83dd33fa9ccbfaf47d35c10b2f8980d444bb2
- MD5 a7ec57c4a80872b784fb780ce032340d
- SHA1 ae1cc7a0bf393e682ebdbf727c5fdb61bc0d518c
- SHA512 4026dda67bc1789901850c125c51b45a8fd8cfd8e1d29bfff63d04fa8f1e564ad2f49e4103a932434cd466ee071b01c8d3ac7fc2b232d208bc76b8cd84fe1e3f
- SSDEEP 786432:Cz4rE3ZObqzz2kxgfRZQbAjdGNOmGCDGo+XyhydA1cM2YkQOgUFw:s4o3Z72kxSZe2sNxxayhyil2Ykgy
- TLSH T1A2C7DFA3D0134B14EBD60A7ADAD138041D98B01EFFA869EF354C9C85E2A37C176B17B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Disables RegEdit via registry modification
Disables Task Manager via registry modification
Executes dropped EXE
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.