General
- Target 2026-10-30_8e05b794c0dfc0a75d50bc2a283b3eb2_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- Sample261030-2ejs3afv7z
- SHA256 d0cae778d03b9ef198ee70345814ff429b8742a0dd070c99128d4e40ef8f63b9
- MD5 8e05b794c0dfc0a75d50bc2a283b3eb2
- SHA1 9204be1b9017e7130e58b13333174049e7fad2c2
- SHA512 69c604a365f94fd3a92ec27cbd3a7e9229fc1b97137bf50329467255c055eeb83863f4ced1ee6a27c7d6e7be988ecd1c12437cc6793c53374d5a8879e84ce14a
- SSDEEP 24576:LBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBM:LBPBiRe6NrfMnO
- TLSH T1F5659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-30_8e05b794c0dfc0a75d50bc2a283b3eb2_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_8e05b794c0dfc0a75d50bc2a283b3eb2_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-30_8e05b794c0dfc0a75d50bc2a283b3eb2_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- SHA256 d0cae778d03b9ef198ee70345814ff429b8742a0dd070c99128d4e40ef8f63b9
- MD5 8e05b794c0dfc0a75d50bc2a283b3eb2
- SHA1 9204be1b9017e7130e58b13333174049e7fad2c2
- SHA512 69c604a365f94fd3a92ec27cbd3a7e9229fc1b97137bf50329467255c055eeb83863f4ced1ee6a27c7d6e7be988ecd1c12437cc6793c53374d5a8879e84ce14a
- SSDEEP 24576:LBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBM:LBPBiRe6NrfMnO
- TLSH T1F5659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1