Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/09/2026, 09:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
- Size 1.7MB
- Sample260922-llymssshnd
- SHA256 ff3515615c608a9ae692046a963c53ead16286ddc6d6aa04a59d1ffd7088fafe
- MD5 de87b27f8873f56ee555b353783681a4
- SHA1 2c5a6d4bf5b6b9cfdc655092ea3a3b1ae5807efa
- SHA512 fbe62a67bf24fc270a553e5f9c4736f6c1faff7c3fc24b0e8ce8686415b1f9af346bad7eee1e7c557697de749f54e73254b1bdc48193b84c7a8a8741b8dd8d61
- SSDEEP 24576:2gH7TqP56MW2eHYwKpQknQ/tbw/2Mkjy6Fr7g0oj:dTWAMOHYw+QkQ/lFTjN4
- TLSH T17E85F12579A4C073C13311310D56D794A73EF9B04F2246DBB7C86FBE2E346C1AB25AA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3532