General
- Target 2026-10-22_5ea956f93d0734c9720714c8a2878061_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- Sample261024-nsa67ahw3y
- SHA256 b83716de9d35c543f90aa9ea1ba8a9e1d82e832d9d462560191bae829f4ba2bf
- MD5 5ea956f93d0734c9720714c8a2878061
- SHA1 87a008dc34f0355f098101c3a700d7d06bec7887
- SHA512 81bbd461ac5691e0ccebfad4915098050a7c4d1cb0ca0da0097a68a4ead183ecf0851a28724e231c0bece3fa6181d29e180512a208c8bdbc0782aebaedc0e70f
- SSDEEP 24576:TBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nB0:TBPBiRe6NrfMnW
- TLSH T1B9659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_5ea956f93d0734c9720714c8a2878061_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_5ea956f93d0734c9720714c8a2878061_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_5ea956f93d0734c9720714c8a2878061_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- SHA256 b83716de9d35c543f90aa9ea1ba8a9e1d82e832d9d462560191bae829f4ba2bf
- MD5 5ea956f93d0734c9720714c8a2878061
- SHA1 87a008dc34f0355f098101c3a700d7d06bec7887
- SHA512 81bbd461ac5691e0ccebfad4915098050a7c4d1cb0ca0da0097a68a4ead183ecf0851a28724e231c0bece3fa6181d29e180512a208c8bdbc0782aebaedc0e70f
- SSDEEP 24576:TBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nB0:TBPBiRe6NrfMnW
- TLSH T1B9659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1