Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 03:52
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-02_9149b8b69b5ae8461918c3fe1858f81e_amadey_elex_gcleaner_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_9149b8b69b5ae8461918c3fe1858f81e_amadey_elex_gcleaner_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-06-02_9149b8b69b5ae8461918c3fe1858f81e_amadey_elex_gcleaner_luca-stealer_lynx_njrat_smoke-loader.exe
- Size 242KB
- Sample260602-effrgadt71
- SHA256 02be99ffc2a1790d4ceab78c6aad1340d40c4470fb4139d82ebd460f4b6520a7
- MD5 9149b8b69b5ae8461918c3fe1858f81e
- SHA1 1e672b29f4766cf3c9dd25acb6a3b646bc7ebc10
- SHA512 d77ebd74cd5d52b5ae9e1432e063ca3e080faff7153ef129cc30e7727405b850ca22b3d49fb86dbdfe0c33812768692a8d5733d0f0940a28f94b6e06284d24eb
- SSDEEP 3072:waUaAVq6/mLHI5dHtXm4nMJN6glT76hunCopnRd/RWh/3hcIaE/4sIaEAg0FuDE0:P+EI/NXhn/gB6Wzjd/Ry/3AAOs+AM3j
- TLSH T119348D117892C476D572153154F8EBB1896EBD340B714AEB67D40F3E8E302E3AA31E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-06-02_9149b8b69b5ae8461918c3fe1858f81e_amadey_elex_gcleaner_luca-stealer_lynx_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-02_9149b8b69b5ae8461918c3fe1858f81e_amadey_elex_gcleaner_luca-stealer_lynx_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-02_9149b8b69b5ae8461918c3fe1858f81e_amadey_elex_gcleaner_luca-stealer_lynx_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4456