General
- Target 2026-10-17_a9004fc683ae738593695422402bd5b1_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- Sample261018-12dpwsbs2s
- SHA256 22881c202aacda41f16df3b2d013e8bb17fb12773ac46714735e4dfbbac69ab4
- MD5 a9004fc683ae738593695422402bd5b1
- SHA1 08054f93806c7f42e5a55d33295d4406b2054c47
- SHA512 056984c119a1165681b7c00654122bb0997ed5b0d768f253db887f00a6088b375f18be880e634442099e820d8b785caf5a686995fdbf4346d34438e888f6c7da
- SSDEEP 24576:qBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBM:qBPBiRe6NrfMn+
- TLSH T162659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-17_a9004fc683ae738593695422402bd5b1_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-17_a9004fc683ae738593695422402bd5b1_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-17_a9004fc683ae738593695422402bd5b1_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- SHA256 22881c202aacda41f16df3b2d013e8bb17fb12773ac46714735e4dfbbac69ab4
- MD5 a9004fc683ae738593695422402bd5b1
- SHA1 08054f93806c7f42e5a55d33295d4406b2054c47
- SHA512 056984c119a1165681b7c00654122bb0997ed5b0d768f253db887f00a6088b375f18be880e634442099e820d8b785caf5a686995fdbf4346d34438e888f6c7da
- SSDEEP 24576:qBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBM:qBPBiRe6NrfMn+
- TLSH T162659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1