General
- Target 2026-10-22_04ce362928080f83b3c0ff3f03d438d8_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- Sample261024-2vcppacy4t
- SHA256 290f1ab4c1120deff3948501f94e97762be12a849706fda6e854dfefb4d7cb73
- MD5 04ce362928080f83b3c0ff3f03d438d8
- SHA1 e4ffeb00b489149d71050d8ea57c8fb8322e22c1
- SHA512 c8484153e594a1d97990048972ba42b3cadaffb8c3004da89c394a6bc4ffad75f3f186c456bd76290b613bfb293e3f03e5ad9789a444031ed13ef95b08bea8bd
- SSDEEP 24576:XBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBk:XBPBiRe6NrfMnW
- TLSH T179659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_04ce362928080f83b3c0ff3f03d438d8_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_04ce362928080f83b3c0ff3f03d438d8_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_04ce362928080f83b3c0ff3f03d438d8_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- SHA256 290f1ab4c1120deff3948501f94e97762be12a849706fda6e854dfefb4d7cb73
- MD5 04ce362928080f83b3c0ff3f03d438d8
- SHA1 e4ffeb00b489149d71050d8ea57c8fb8322e22c1
- SHA512 c8484153e594a1d97990048972ba42b3cadaffb8c3004da89c394a6bc4ffad75f3f186c456bd76290b613bfb293e3f03e5ad9789a444031ed13ef95b08bea8bd
- SSDEEP 24576:XBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBk:XBPBiRe6NrfMnW
- TLSH T179659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1