General
- Target 2026-09-30_49883b3f454c987fcf2532f53a349642_amadey_elex_hellokitty_luca-stealer_njrat
- Size 2.3MB
- Sample261001-sdphgsshrg
- SHA256 27a3104e35eb3240540de6066030a3162bacba0b6274f584f258158c7cbf631d
- MD5 49883b3f454c987fcf2532f53a349642
- SHA1 f5d6b11e57db915fdc601081b12c266a2dd83cb7
- SHA512 a9af285fbeecdf05f8e67b3a54b9cb894fc299ac7b91f98be229122008ef67f9b84dd9aedc4a4f4178259b789a0ed91d018a94e4de7aaef849b1cbb185433bbd
- SSDEEP 49152:XhJLNY0xNCN3piEa3B/yvJJHBXNTn325kSiV3QpOmTiGIcNMzwjbVPTI/:Xh5i24ihyvJdn3JSiVgEK2cK4bVbI/
- TLSH T1E9B5010C65908F2AE07648305DA637F055AABF2EAEE5864F275CB82C1C7CBE5D431736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_49883b3f454c987fcf2532f53a349642_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_49883b3f454c987fcf2532f53a349642_amadey_elex_hellokitty_luca-stealer_njrat
- Size 2.3MB
- SHA256 27a3104e35eb3240540de6066030a3162bacba0b6274f584f258158c7cbf631d
- MD5 49883b3f454c987fcf2532f53a349642
- SHA1 f5d6b11e57db915fdc601081b12c266a2dd83cb7
- SHA512 a9af285fbeecdf05f8e67b3a54b9cb894fc299ac7b91f98be229122008ef67f9b84dd9aedc4a4f4178259b789a0ed91d018a94e4de7aaef849b1cbb185433bbd
- SSDEEP 49152:XhJLNY0xNCN3piEa3B/yvJJHBXNTn325kSiV3QpOmTiGIcNMzwjbVPTI/:Xh5i24ihyvJdn3JSiVgEK2cK4bVbI/
- TLSH T1E9B5010C65908F2AE07648305DA637F055AABF2EAEE5864F275CB82C1C7CBE5D431736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1