General
- Target 2026-09-26_4fbc144f8d0ec120f6cfb64c786c9bd2_amadey_elex_hellokitty_luca-stealer_lynx_njrat
- Size 1.2MB
- Sample260926-2ywa7sty2n
- SHA256 3a6ec3a53e4e7e11ad964ccca745016254492c6558bbdcac289d9d715b539c15
- MD5 4fbc144f8d0ec120f6cfb64c786c9bd2
- SHA1 0f5b29fc05a08c56b630a12b3d8a94565df4ea4a
- SHA512 a7d1f95e5fe7924a37090d14862abfd0924ab20aa0a2a9157be24558edb9f85545d727c5c6417140eee6293aa3a55b4fc745397e7880e986a60a59c1cfd2a69e
- SSDEEP 24576:Muex6YtOUDgF70c9xmQtlX8kA2Mje27Ni1JFbDZ8:Muex6sOUDkzkQtlMBXe27gdbDZ8
- TLSH T19045121135C0C832D67719358A90E7308A7DF9700F6189FB73912B7ACF756D2CA6A93A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-26_4fbc144f8d0ec120f6cfb64c786c9bd2_amadey_elex_hellokitty_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_4fbc144f8d0ec120f6cfb64c786c9bd2_amadey_elex_hellokitty_luca-stealer_lynx_njrat
- Size 1.2MB
- SHA256 3a6ec3a53e4e7e11ad964ccca745016254492c6558bbdcac289d9d715b539c15
- MD5 4fbc144f8d0ec120f6cfb64c786c9bd2
- SHA1 0f5b29fc05a08c56b630a12b3d8a94565df4ea4a
- SHA512 a7d1f95e5fe7924a37090d14862abfd0924ab20aa0a2a9157be24558edb9f85545d727c5c6417140eee6293aa3a55b4fc745397e7880e986a60a59c1cfd2a69e
- SSDEEP 24576:Muex6YtOUDgF70c9xmQtlX8kA2Mje27Ni1JFbDZ8:Muex6sOUDkzkQtlMBXe27gdbDZ8
- TLSH T19045121135C0C832D67719358A90E7308A7DF9700F6189FB73912B7ACF756D2CA6A93A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1