Analysis
- max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/08/2026, 22:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_b5ac674de78461eeb2a73eb71d811b77_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_b5ac674de78461eeb2a73eb71d811b77_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-11_b5ac674de78461eeb2a73eb71d811b77_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
- Size 1.3MB
- Sample260811-19stsashqf
- SHA256 4ba68dbf3fc7b80507d7f6090b4d949e4fffde822124738dd48d19ab322438ab
- MD5 b5ac674de78461eeb2a73eb71d811b77
- SHA1 4217c9aa3b75c964d1bbfa38af1168d57e085148
- SHA512 a935de9d19e3079ea53d02ec3a68f16b3812f53fee966b0e39c753ae2dd685cdf17217fe1eac2ea7922446928f667365952cc35bb2e905e1744937eb756dad5d
- SSDEEP 12288:DUYJ9birJlARaGdf1IrOrNhyRfLz707YH7lk9wl225CnPkKb5rdRYd:QYJ9byvoKFLgYHJWwl24C15rDY
- TLSH T1A155012671C180B2EA73093119F8A672853DFD325F6449EBA3513BAF2D306D09A3D767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-11_b5ac674de78461eeb2a73eb71d811b77_amadey_elex_hellokitty_luca-stealer_njrat_play.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-11_b5ac674de78461eeb2a73eb71d811b77_amadey_elex_hellokitty_luca-stealer_njrat_play.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-11_b5ac674de78461eeb2a73eb71d811b77_amadey_elex_hellokitty_luca-stealer_njrat_play.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4132