Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/10/2026, 14:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_552db27ed65f8528518eb3154f56a124_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_552db27ed65f8528518eb3154f56a124_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-08_552db27ed65f8528518eb3154f56a124_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
- Size 1.5MB
- Sample261009-rx15yshx21
- SHA256 e2564f1e6e748f764c57fbb39021c2f3762013342814274c3983c7004aec06f4
- MD5 552db27ed65f8528518eb3154f56a124
- SHA1 c843bb287c474d5429ad87d543916a3628322ba0
- SHA512 35e953c4950dfa38d1a90fa10be676d3871a513c98bdedabb16fcce82e878f3f2b567e82e2f53eed09fba5572727cf26812054ad7acfbaa0db362e93a5687baa
- SSDEEP 12288:a93G6vHzOASubviBNDYa3PgfwWZF/xZ+2r4O+Jr/Yo6hUGCW4VP5zZWZG00B:aVGGTWBZmHxP4O+lwo6hUPVhx00
- TLSH T18575125132C1C0B7D5631A3081B0DA71993EFC311FB55DDF63982B6A4EB0AD28A3976B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-08_552db27ed65f8528518eb3154f56a124_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-08_552db27ed65f8528518eb3154f56a124_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-08_552db27ed65f8528518eb3154f56a124_amadey_elex_hellokitty_luca-stealer_njrat_play_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3236