General
- Target 2026-10-22_ba4b28defa5f8545b63b47d9be11e65d_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- Sample261023-2w8thset9y
- SHA256 6e259279f27a8cec8580e708f2afa6adfc9c829f2c622e3341a4937550c231ab
- MD5 ba4b28defa5f8545b63b47d9be11e65d
- SHA1 ecd295bb9e63fc72c0e59a0fd3d8ff5d76b4eab3
- SHA512 b0da96dc85ad31708cf88f1b639146594df730bd66e2a86cf3cd3154e3d9a20208fe1d779364d41089de22e2dad1f8956aeabf2c81fcf2c987bc63c7dccecc00
- SSDEEP 24576:jBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBk:jBPBiRe6NrfMnW
- TLSH T1D8659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_ba4b28defa5f8545b63b47d9be11e65d_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_ba4b28defa5f8545b63b47d9be11e65d_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_ba4b28defa5f8545b63b47d9be11e65d_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- SHA256 6e259279f27a8cec8580e708f2afa6adfc9c829f2c622e3341a4937550c231ab
- MD5 ba4b28defa5f8545b63b47d9be11e65d
- SHA1 ecd295bb9e63fc72c0e59a0fd3d8ff5d76b4eab3
- SHA512 b0da96dc85ad31708cf88f1b639146594df730bd66e2a86cf3cd3154e3d9a20208fe1d779364d41089de22e2dad1f8956aeabf2c81fcf2c987bc63c7dccecc00
- SSDEEP 24576:jBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBk:jBPBiRe6NrfMnW
- TLSH T1D8659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1