01829dcfb11c4966bb0459a425e05661df6d12385e444dfdb8a6b58aa0d78173

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/10/2026, 22:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-05_6dba95f769ad56d3f97301e0c50a4e18_amadey_elex_floxif_luca-stealer_njrat_smoke-loader.exe
Size 2.2MB
Sample261006-19ebdsh14m
SHA256 01829dcfb11c4966bb0459a425e05661df6d12385e444dfdb8a6b58aa0d78173
MD5 6dba95f769ad56d3f97301e0c50a4e18
SHA1 b86027afc1010f774ff581122f1e15c5c2f56419
SHA512 18e6c27c09779c405bca4709c1d2fb7f41043f651dbcf068a6fa0f6640dede22dad61eb9983891b4c27696bee9bba4acc7bd4516c0d79b085f826733bca88265
SSDEEP 24576:6buhx9qQR9J1jtZQdpWcttvL4P9qHXOeiPx4JLtgfHc86e/2cY9qwMnZPoNSecNm:6622GoqT6LkdNsGa8h6aQpy
TLSH
T1E5B52901A750511DFAE302B35AFE61AC586D7EB007A850C7A1C43AFDE63A7E16E33647
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-10-05_6dba95f769ad56d3f97301e0c50a4e18_amadey_elex_floxif_luca-stealer_njrat_smoke-loader.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-05_6dba95f769ad56d3f97301e0c50a4e18_amadey_elex_floxif_luca-stealer_njrat_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-05_6dba95f769ad56d3f97301e0c50a4e18_amadey_elex_floxif_luca-stealer_njrat_smoke-loader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1984

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1984-0-0x0000000000830000-0x0000000000B1B000-memory.dmp

Download