Analysis
- max time kernel
150s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 04:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_8039ccf883ee79690f31445e673f99d2_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_8039ccf883ee79690f31445e673f99d2_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-09-08_8039ccf883ee79690f31445e673f99d2_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_smoke-loader.exe
- Size 1.6MB
- Sample260910-e7r9ksxgqe
- SHA256 0ef18a88c10a83e4c35a9711a37ed5fa6d5ff79c63b639ea7b83938a54d5f25c
- MD5 8039ccf883ee79690f31445e673f99d2
- SHA1 742ab649c8a5b302316f884519a2781cad928b9e
- SHA512 bd8b57f97e1b8c3a833381c8e77d69728c7cb4d0800983bf4278f7d33ad2ed317e421e14953f6d5f88b61a273c79261463d0581cb5036fa99aea6287bdc528c3
- SSDEEP 24576:ooP5VdEsC/sqjnhMgeiCl7G0nehbGZpbD:LvdEsCjDmg27RnWGj
- TLSH T1E285022075E1C173D572053145F8EB7A992EBD314F2059EBA7D41FBE8E302C09A36A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-08_8039ccf883ee79690f31445e673f99d2_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-08_8039ccf883ee79690f31445e673f99d2_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-08_8039ccf883ee79690f31445e673f99d2_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1828