General
- Target 2026-09-21_c5edc5c1515459b0788882072c29048a_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260922-mamltsdf49
- SHA256 faf68c5af230cc4fe0daebf900a5a66b13c4f56ff9bfea34de5e86efbff001a1
- MD5 c5edc5c1515459b0788882072c29048a
- SHA1 d08bb3042fcc447d3b79e1b28e2f1f9ad10b6b5c
- SHA512 66e682676f3124421409d26cb698135291305a24c7f4fc4c179a0898af1d78e2b55030c75cda99d04d16d2fe90075edff711144a411593f472b4dc566062669e
- SSDEEP 49152:kWJE2ZctEafitmGYj+uYP4D2VPrX61p7tTdvySga/9:VE2ZBaqaj+uYP4srSfdvyS5V
- TLSH T173852310B1D6D4B8F7B21A329C75DAA00FB9FD304A744AEF539C6E251B78580E43DB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_c5edc5c1515459b0788882072c29048a_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_c5edc5c1515459b0788882072c29048a_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 faf68c5af230cc4fe0daebf900a5a66b13c4f56ff9bfea34de5e86efbff001a1
- MD5 c5edc5c1515459b0788882072c29048a
- SHA1 d08bb3042fcc447d3b79e1b28e2f1f9ad10b6b5c
- SHA512 66e682676f3124421409d26cb698135291305a24c7f4fc4c179a0898af1d78e2b55030c75cda99d04d16d2fe90075edff711144a411593f472b4dc566062669e
- SSDEEP 49152:kWJE2ZctEafitmGYj+uYP4D2VPrX61p7tTdvySga/9:VE2ZBaqaj+uYP4srSfdvyS5V
- TLSH T173852310B1D6D4B8F7B21A329C75DAA00FB9FD304A744AEF539C6E251B78580E43DB62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1