Analysis
- max time kernel
148s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/06/2026, 11:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_ee4110aab0b08eb0857f06cd5a7511b8_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_ee4110aab0b08eb0857f06cd5a7511b8_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260618-en
1 signatures
150 seconds
General
- Target 2026-06-26_ee4110aab0b08eb0857f06cd5a7511b8_elex_luca-stealer_njrat_remcos_smoke-loader.exe
- Size 3.8MB
- Sample260629-ncdblsdw8m
- SHA256 a4b272077e0b0e15889fb8c39608192f878effe2c520c940b4385681b302d66c
- MD5 ee4110aab0b08eb0857f06cd5a7511b8
- SHA1 8e755dbd68f10c3df713da4063e484bd5bf25e98
- SHA512 2df35eb3f70ed63994c918ff58cf8617f0fddebb520cd58c114eed6e92a1cb607131dc6f510dfc15e44aeb1fcebb457a452dd31617d8326242065c8ce22d2b62
- SSDEEP 49152:R3XTWsOBDNQ2iselXOfTITJR0nrtFPpXmfiSLI+VxBSTkqY3yZYIL4XKIvVF:RLGSThOfTCiFBXmfFs+JMHpCVF
- TLSH T1AD063355F480A071E039143615F989F2B03CBD716725A6CFB3AA3A714F343E4267AA9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-06-26_ee4110aab0b08eb0857f06cd5a7511b8_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-26_ee4110aab0b08eb0857f06cd5a7511b8_elex_luca-stealer_njrat_remcos_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-26_ee4110aab0b08eb0857f06cd5a7511b8_elex_luca-stealer_njrat_remcos_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5820