Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/10/2026, 16:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_2229f6ab5994a38af841a8541f12488b_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_2229f6ab5994a38af841a8541f12488b_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-02_2229f6ab5994a38af841a8541f12488b_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
- Size 1.5MB
- Sample261003-tgchrssz5r
- SHA256 64f7cc46960b8b2e71f2158edd436c71c8e2da606442caa9e24302b08e16b4e8
- MD5 2229f6ab5994a38af841a8541f12488b
- SHA1 e8751fb96a62c87fdb813d81643595f2864b4bb7
- SHA512 1bfde569b25344ffbfa815219f50ff2c07dac394519cd14962819b4875d04d06ba1149b23cb3a2d20cefe8fcb43799e687ca8a7be68570a323ca257c0b9d0ec0
- SSDEEP 24576:jVGGTWBZJmb57GBiOl6a8JTth/RWZvR6wQQ92pN3:xGyWBZEb5+Pl6bJTIZ5jdgp
- TLSH T12D75020136D190B2D4B31A3489F4DB70A93DFE309FA55AEB93A41B2AAE303C25D35757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-02_2229f6ab5994a38af841a8541f12488b_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-02_2229f6ab5994a38af841a8541f12488b_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-02_2229f6ab5994a38af841a8541f12488b_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5968