Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 03:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_1c0240c9f9b5aef102aed59d3c47d9d2_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_1c0240c9f9b5aef102aed59d3c47d9d2_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-20_1c0240c9f9b5aef102aed59d3c47d9d2_amadey_elex_luca-stealer_njrat_smoke-loader.exe
- Size 2.9MB
- Sample260720-d1e51agx2t
- SHA256 840750da7a4df40cd0be3053acb3ece253113926bd06af22459ad906b8d69b68
- MD5 1c0240c9f9b5aef102aed59d3c47d9d2
- SHA1 a95a2aa053e5df689778ff2bbb97f6c03b802f66
- SHA512 a6f5be3aff06977c5ea0f0da0589acf9a2c7b51881843208fb746082a3b0fb0b0336b27abda03abc3ee2ad6daa29ab6549080d3bf29c1520e99f0affa3e31da6
- SSDEEP 24576:YJX00QBQPMFYmLUWX+JnnecB5aGF7cUf0We4hvNCkAzCqnVb:YJX0DBEYSag7BvY
- TLSH T187E518A46681A01BFCE6C5BE45FD10AC6D28ADB2C79494C39DC039DEC275AEC3931E17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-20_1c0240c9f9b5aef102aed59d3c47d9d2_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-20_1c0240c9f9b5aef102aed59d3c47d9d2_amadey_elex_luca-stealer_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-20_1c0240c9f9b5aef102aed59d3c47d9d2_amadey_elex_luca-stealer_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3948