General
- Target 2026-11-01_daff044eee0ae5d66790c8e31c23e505_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- Sample261102-hfx8astt6l
- SHA256 84f6aae1ce990279ffdac03d0789ca7c723c760ddd2415476611c4970466ea7d
- MD5 daff044eee0ae5d66790c8e31c23e505
- SHA1 3ce1096d1f52f064b77b159b1d722cc5df522950
- SHA512 2385faf12f48f19a238f3dc735026f7dbb3c388630f1a3b554e4239b761138cf0919801b21f6d60dc02bea079a3cb981b1ca46db99aa0c5f60df716daa21f6f0
- SSDEEP 24576:cBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nB0:cBPBiRe6NrfMn2
- TLSH T101659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_daff044eee0ae5d66790c8e31c23e505_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_daff044eee0ae5d66790c8e31c23e505_amadey_elex_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_daff044eee0ae5d66790c8e31c23e505_amadey_elex_hellokitty_luca-stealer_njrat
- Size 1.4MB
- SHA256 84f6aae1ce990279ffdac03d0789ca7c723c760ddd2415476611c4970466ea7d
- MD5 daff044eee0ae5d66790c8e31c23e505
- SHA1 3ce1096d1f52f064b77b159b1d722cc5df522950
- SHA512 2385faf12f48f19a238f3dc735026f7dbb3c388630f1a3b554e4239b761138cf0919801b21f6d60dc02bea079a3cb981b1ca46db99aa0c5f60df716daa21f6f0
- SSDEEP 24576:cBcVS7OfSt5QbrxsSejdXg1zQw3rR0oQG7d6nB0:cBPBiRe6NrfMn2
- TLSH T101659D06B28A43FDC5E311B8FE29B2E39876952D637B61F3606C425814309FB16EB3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1