General
- Target 2026-11-02_cb545d710a5f3c2d970a9deac6847fa6_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- Sample261102-2kb1eagd93
- SHA256 3d2a72609a10ee0b9410beeb4049b906b1b19dde5e765b778a7a219351ca9e25
- MD5 cb545d710a5f3c2d970a9deac6847fa6
- SHA1 3546a9abf937ae7a7491daa51208f596e08c0a11
- SHA512 eec26b860ccd73abff508b05c5994957666125e6eac58d48da79144a868b04c5c2e6013f1c2be6805270a76045f27455b938c8ef18d14b95e573f4526b706174
- SSDEEP 24576:UBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBk:UBPBiRe6NrfMn2
- TLSH T1E7659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_cb545d710a5f3c2d970a9deac6847fa6_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_cb545d710a5f3c2d970a9deac6847fa6_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_cb545d710a5f3c2d970a9deac6847fa6_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- SHA256 3d2a72609a10ee0b9410beeb4049b906b1b19dde5e765b778a7a219351ca9e25
- MD5 cb545d710a5f3c2d970a9deac6847fa6
- SHA1 3546a9abf937ae7a7491daa51208f596e08c0a11
- SHA512 eec26b860ccd73abff508b05c5994957666125e6eac58d48da79144a868b04c5c2e6013f1c2be6805270a76045f27455b938c8ef18d14b95e573f4526b706174
- SSDEEP 24576:UBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nBk:UBPBiRe6NrfMn2
- TLSH T1E7659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1