General
- Target 2026-09-21_144a04b2184c8b38b6220246d1c7a4f5_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260922-sd1kragh46
- SHA256 36cb880a92b95bf599e1a1c148df0397b7311d319aad8f7c399b56d08afa7b2c
- MD5 144a04b2184c8b38b6220246d1c7a4f5
- SHA1 7cfe67dcecc5469f3a134e75dff589b7cd8dfdac
- SHA512 b3ff2dfcd2a435149e9532eaf393336e07a53ecfa9cf7321562296383c9e0fe7cdb05c44155df12ea91df201c92d695c48c03d28bfc6efe9305e16358220d238
- SSDEEP 49152:MWJE2ZctEafitmGYj+uYP4D2VPrXXiDqMjoFhC65WL1Q1Q:9E2ZBaqaj+uYP4sriuMjonLqaQ
- TLSH T17B85231075E1D4B9F6F61F359875C5B00EF8FC214A388A9F63847A391EB4980E539BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_144a04b2184c8b38b6220246d1c7a4f5_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_144a04b2184c8b38b6220246d1c7a4f5_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 36cb880a92b95bf599e1a1c148df0397b7311d319aad8f7c399b56d08afa7b2c
- MD5 144a04b2184c8b38b6220246d1c7a4f5
- SHA1 7cfe67dcecc5469f3a134e75dff589b7cd8dfdac
- SHA512 b3ff2dfcd2a435149e9532eaf393336e07a53ecfa9cf7321562296383c9e0fe7cdb05c44155df12ea91df201c92d695c48c03d28bfc6efe9305e16358220d238
- SSDEEP 49152:MWJE2ZctEafitmGYj+uYP4D2VPrXXiDqMjoFhC65WL1Q1Q:9E2ZBaqaj+uYP4sriuMjonLqaQ
- TLSH T17B85231075E1D4B9F6F61F359875C5B00EF8FC214A388A9F63847A391EB4980E539BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1