Analysis
- max time kernel
150s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/08/2026, 10:35
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-14_3821a539a0e3747a0382d7b51f56c322_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_3821a539a0e3747a0382d7b51f56c322_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-08-14_3821a539a0e3747a0382d7b51f56c322_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
- Size 750KB
- Sample260814-mmxbsshq6v
- SHA256 67fc24f37bf0015d41573cf01e36828e2d3db24a85077d76afc39315aad3f0ca
- MD5 3821a539a0e3747a0382d7b51f56c322
- SHA1 da773ab63a1b1e59347cd94e95c2e244e6669b0e
- SHA512 fbbcb8eadbc33c757b7321cb6f3769256a7282fa1edac15a8e458e3c0a4f86f6919e7e40d4380a76e6a25aaed80ee390dc3a1520af0602577e65e68d1bdc2918
- SSDEEP 12288:0L/GtSbVvUhb9pKg2FB003/gk9SSgX7IltZuOGhB5/vXoU9vmssrDJER/QVQGX90:GGMVOwB003/P/uOCB5/vXz9OssIQVTRU
- TLSH T10EF49E22BA81C033E5B20031A6BD9776583DB5300B2985DBF3D90B792EB45D17E3A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_3821a539a0e3747a0382d7b51f56c322_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_3821a539a0e3747a0382d7b51f56c322_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-14_3821a539a0e3747a0382d7b51f56c322_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1976