General
- Target 2026-10-21_7d9507f40e3baf6dfe6e932e6121fae6_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- Sample261022-ytm79atxes
- SHA256 9a9de183618ce9aa8ba35c55012a78531904be115f2f925c950328c1aecf5b6a
- MD5 7d9507f40e3baf6dfe6e932e6121fae6
- SHA1 a4a22bfb0bec9ef34cc78a81efd1069b93569308
- SHA512 87d4585a1325e4c50beb9de9fa0faef8214bf9c081ca805781f37624cafdf4247eea4ea51829c2b8d235dd4c500b6d56c44face53a38ff58c85468acfa3f2b61
- SSDEEP 24576:BBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBk:BBPBiRe6NrfMnG
- TLSH T107659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_7d9507f40e3baf6dfe6e932e6121fae6_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_7d9507f40e3baf6dfe6e932e6121fae6_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_7d9507f40e3baf6dfe6e932e6121fae6_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- SHA256 9a9de183618ce9aa8ba35c55012a78531904be115f2f925c950328c1aecf5b6a
- MD5 7d9507f40e3baf6dfe6e932e6121fae6
- SHA1 a4a22bfb0bec9ef34cc78a81efd1069b93569308
- SHA512 87d4585a1325e4c50beb9de9fa0faef8214bf9c081ca805781f37624cafdf4247eea4ea51829c2b8d235dd4c500b6d56c44face53a38ff58c85468acfa3f2b61
- SSDEEP 24576:BBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBk:BBPBiRe6NrfMnG
- TLSH T107659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1