General
- Target 2026-10-08_15bf673245b0273c4284f2c15aacc9ba_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.3MB
- Sample261009-zagrssvx2j
- SHA256 42d18d4bccab16b8146dd0a4aae44cee565fd1a9d53043492967a4d06c68d429
- MD5 15bf673245b0273c4284f2c15aacc9ba
- SHA1 7ec75a9b9c4c03b526b55e0a8a95727f8afcdcee
- SHA512 3ec1486985101a310471fc5baf85967e8f63e6bea1b0c3d55c9307702c1f56d85894d0a07335d1455cad2afbdd49a897b7a7275fe94288995984a90b130767a3
- SSDEEP 24576:65GtI/40sy49ZoAVMEM9GyqIEx6d5WeSn9:GGC/40sy4PZSEkzExsWeS
- TLSH T16165011232C1C4B3E9B7063009B5E670A97DFE700F754AEF6394672A5D702D29A39B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_15bf673245b0273c4284f2c15aacc9ba_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_15bf673245b0273c4284f2c15aacc9ba_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader
- Size 1.3MB
- SHA256 42d18d4bccab16b8146dd0a4aae44cee565fd1a9d53043492967a4d06c68d429
- MD5 15bf673245b0273c4284f2c15aacc9ba
- SHA1 7ec75a9b9c4c03b526b55e0a8a95727f8afcdcee
- SHA512 3ec1486985101a310471fc5baf85967e8f63e6bea1b0c3d55c9307702c1f56d85894d0a07335d1455cad2afbdd49a897b7a7275fe94288995984a90b130767a3
- SSDEEP 24576:65GtI/40sy49ZoAVMEM9GyqIEx6d5WeSn9:GGC/40sy4PZSEkzExsWeS
- TLSH T16165011232C1C4B3E9B7063009B5E670A97DFE700F754AEF6394672A5D702D29A39B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1