Analysis
- max time kernel
148s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/09/2026, 16:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_c65c94b72d7c8dff365810598a904e4f_amadey_elex_luca-stealer_magniber_njrat_remcos.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_c65c94b72d7c8dff365810598a904e4f_amadey_elex_luca-stealer_magniber_njrat_remcos.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-29_c65c94b72d7c8dff365810598a904e4f_amadey_elex_luca-stealer_magniber_njrat_remcos.exe
- Size 3.2MB
- Sample260929-vfglrszycs
- SHA256 b7a01c18a2e85c852884002fe1e4610ef08c1798d787b62758b1e31b4df0fa82
- MD5 c65c94b72d7c8dff365810598a904e4f
- SHA1 e29d316358e3ef976403e58e01f6acf96e9b0115
- SHA512 87185aefbe92434638f069903e57183d67e30cc03e79a0263040d0d46e78b7f29533c3621ebe371dde14184ec85d24ae40691bec0b0e62f9dc3dd3f4aeef1759
- SSDEEP 49152:V+rb6kg5rNfBPDWKxmvmy37KpQyKCzfJ4klKXnRGnhid0xr/zmfL7Uta38S+U:Ab6FDW5cDzfJ4k/hxxfskEK
- TLSH T1FCE56B31B6CB8C37D1622533496FB59A936F7E311920874B62C43BAD2F705927D23A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-29_c65c94b72d7c8dff365810598a904e4f_amadey_elex_luca-stealer_magniber_njrat_remcos.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_c65c94b72d7c8dff365810598a904e4f_amadey_elex_luca-stealer_magniber_njrat_remcos.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_c65c94b72d7c8dff365810598a904e4f_amadey_elex_luca-stealer_magniber_njrat_remcos.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2948