Analysis
- max time kernel
148s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/07/2026, 01:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_6092000bc2bd4e0601bc9114bbf4ab7a_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_6092000bc2bd4e0601bc9114bbf4ab7a_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-15_6092000bc2bd4e0601bc9114bbf4ab7a_elex_luca-stealer_njrat_remcos_smoke-loader.exe
- Size 3.3MB
- Sample260716-cavbkad17x
- SHA256 1d071eb909f9c774ed48ef738b0814dfbbb16c32582b649f1cd5d1fba4d29be1
- MD5 6092000bc2bd4e0601bc9114bbf4ab7a
- SHA1 80401de0ff5808bf75469cf8432f659498d1d201
- SHA512 5928fe63ccccd253ec14100430d64c62f6872a06269379b73e78f51a6d42af86fda2dc22c29458fc2c2bf88fcfd1953487b76f9a9b47a10b35ad338f78b3f769
- SSDEEP 49152:R3XTWsTBDNQ2iselXOfTITJR0nrtFPpXmfiSLI+VxBSTkqY3yZT:RLVSThOfTCiFBXmfFs+JMHT
- TLSH T161F53316F8C0E072D039143615F985B5F03CBC31672556DFA3A93A751E382E8277AEAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-15_6092000bc2bd4e0601bc9114bbf4ab7a_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-15_6092000bc2bd4e0601bc9114bbf4ab7a_elex_luca-stealer_njrat_remcos_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-15_6092000bc2bd4e0601bc9114bbf4ab7a_elex_luca-stealer_njrat_remcos_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1132