89ab12d605346c6a2cf7cffcbd0032590eaf7807aa12c295a00952383669ab77 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-10-26...at.exe

windows10-2004-x64

7

2026-10-26...at.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_f404d7ed56f0a6cc4133c78e2c0cea4f_amadey_elex_hellokitty_luca-stealer_njrat
Size 1.4MB
Sample261027-cq78csce26
SHA256 89ab12d605346c6a2cf7cffcbd0032590eaf7807aa12c295a00952383669ab77
MD5 f404d7ed56f0a6cc4133c78e2c0cea4f
SHA1 29a9da4728ce4a3376615cb678ce6c397f417d30
SHA512 589d107c90f0da59993eb3d9c4f8e1f837e3c26d797b7470ee86baaa776d2b0b9e92ab00cfe5ea3c9842ccb96479505f1fd5d7946cfc6d8a1576538d92a864ec
SSDEEP 24576:8BcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nB:8BPBiRe6NrfMn
TLSH
T198659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-10-26_f404d7ed56f0a6cc4133c78e2c0cea4f_amadey_elex_hellokitty_luca-stealer_njrat.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion discovery persistence

Behavioral task

behavioral2

Sample

2026-10-26_f404d7ed56f0a6cc4133c78e2c0cea4f_amadey_elex_hellokitty_luca-stealer_njrat.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion discovery persistence

Malware Config

Targets

- Target
  2026-10-26_f404d7ed56f0a6cc4133c78e2c0cea4f_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- SHA256 89ab12d605346c6a2cf7cffcbd0032590eaf7807aa12c295a00952383669ab77
- MD5 f404d7ed56f0a6cc4133c78e2c0cea4f
- SHA1 29a9da4728ce4a3376615cb678ce6c397f417d30
- SHA512 589d107c90f0da59993eb3d9c4f8e1f837e3c26d797b7470ee86baaa776d2b0b9e92ab00cfe5ea3c9842ccb96479505f1fd5d7946cfc6d8a1576538d92a864ec
- SSDEEP 24576:8BcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nB:8BPBiRe6NrfMn
- TLSH
  T198659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence

© 2018-2026

Terms | Privacy