General
- Target 2026-09-29_39aa7a8ac665e65d9d7cf0c9483e827f_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.3MB
- Sample260930-dfswcssapb
- SHA256 4617455e03226cdb6abac7b97576d9dc86d6c3199a5367a3b54145e4b24b064e
- MD5 39aa7a8ac665e65d9d7cf0c9483e827f
- SHA1 5cc81f89d1b87a3bb7e8e9eaec66e631fa306210
- SHA512 6034d550fae72a110ff81134dd94cb444c13bfbbab84efd8b0b9b2161a556c5a85b0d4aa41b8916db78875b45f5441730bcd88edcaaf70f81f2657216bd4dbf7
- SSDEEP 24576:XVGGTWBZNsqjnhMgeiCl7G0nehbGZpbD:lGyWBZxDmg27RnWGj
- TLSH T11855012172C080B7D973193046B4EA71683EFE315F6049DB73952B6E9EB06D18E38B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_39aa7a8ac665e65d9d7cf0c9483e827f_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_39aa7a8ac665e65d9d7cf0c9483e827f_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.3MB
- SHA256 4617455e03226cdb6abac7b97576d9dc86d6c3199a5367a3b54145e4b24b064e
- MD5 39aa7a8ac665e65d9d7cf0c9483e827f
- SHA1 5cc81f89d1b87a3bb7e8e9eaec66e631fa306210
- SHA512 6034d550fae72a110ff81134dd94cb444c13bfbbab84efd8b0b9b2161a556c5a85b0d4aa41b8916db78875b45f5441730bcd88edcaaf70f81f2657216bd4dbf7
- SSDEEP 24576:XVGGTWBZNsqjnhMgeiCl7G0nehbGZpbD:lGyWBZxDmg27RnWGj
- TLSH T11855012172C080B7D973193046B4EA71683EFE315F6049DB73952B6E9EB06D18E38B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1