e754b49ba4e2764b2f652daf271b14d2eb07368943ebc1307fd4af37e396cad4

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/05/2026, 16:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-23_48b2030c6efa81f67e5b1ea59482d8e0_amadey_elex_luca-stealer_mespinoza_njrat_vidar.exe
Size 2.4MB
Sample260523-tw6p6ags21
SHA256 e754b49ba4e2764b2f652daf271b14d2eb07368943ebc1307fd4af37e396cad4
MD5 48b2030c6efa81f67e5b1ea59482d8e0
SHA1 9cc6dd10da90fd30fb639aa8f6dd574cf11f4476
SHA512 975e6a8b03e0a3892f12a90ebb54027dbbdbf5d0394bab5579f4c6af43768e651130ff66d82028266f3d473e4de04f6a5f6267d4cd96b7c28f19c243637cec50
SSDEEP 49152:W8xmN3Aek03noj45wlDTEpYqzy6i1zuajsauZjaR:WeUJF3noxD46Utk
TLSH
T1A2C56C15A6A440B5D0738131C6A5A25DE6717861D7238ECF23849EFCBFE36E09D39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-23_48b2030c6efa81f67e5b1ea59482d8e0_amadey_elex_luca-stealer_mespinoza_njrat_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-23_48b2030c6efa81f67e5b1ea59482d8e0_amadey_elex_luca-stealer_mespinoza_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-23_48b2030c6efa81f67e5b1ea59482d8e0_amadey_elex_luca-stealer_mespinoza_njrat_vidar.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads