General
- Target 2026-09-26_7bfb92d0d5c9fa58897525d2dcd6fdfb_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.8MB
- Sample260926-ysc1ws1apf
- SHA256 b102d275affb4677ef94567bb5998032a39a6a347aa551c55d2e6ba0cef40b91
- MD5 7bfb92d0d5c9fa58897525d2dcd6fdfb
- SHA1 30d987a67650772d735fc989240c5d9a95b3ae34
- SHA512 1fb23b3e9236d2645808c2c0c392a38423b42fb149d28089ddf87f46b7a385da08c320b9ce69b2e6810f5f3a78fadd89d7fbc6e2e0d986baf968c6bce8e9aac3
- SSDEEP 24576:ym8r/0pb7a7Gho5eNnNlinRSuL/tA/eGl41lo1+/GoFDn4flNgmS/mLCPZtHp5gm:Ir/kq7GOKliVVA/XRCPZMiwY/3g6df
- TLSH T1CC852311B1E54071F0B72A3119E4EBB5CD7EFD385E229D5B23C61E382F701A2EA25726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-26_7bfb92d0d5c9fa58897525d2dcd6fdfb_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_7bfb92d0d5c9fa58897525d2dcd6fdfb_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.8MB
- SHA256 b102d275affb4677ef94567bb5998032a39a6a347aa551c55d2e6ba0cef40b91
- MD5 7bfb92d0d5c9fa58897525d2dcd6fdfb
- SHA1 30d987a67650772d735fc989240c5d9a95b3ae34
- SHA512 1fb23b3e9236d2645808c2c0c392a38423b42fb149d28089ddf87f46b7a385da08c320b9ce69b2e6810f5f3a78fadd89d7fbc6e2e0d986baf968c6bce8e9aac3
- SSDEEP 24576:ym8r/0pb7a7Gho5eNnNlinRSuL/tA/eGl41lo1+/GoFDn4flNgmS/mLCPZtHp5gm:Ir/kq7GOKliVVA/XRCPZMiwY/3g6df
- TLSH T1CC852311B1E54071F0B72A3119E4EBB5CD7EFD385E229D5B23C61E382F701A2EA25726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1