Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/10/2026, 17:17
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-08_36bd3cbfeaf565aed923e12785b86760_amadey_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_36bd3cbfeaf565aed923e12785b86760_amadey_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-08_36bd3cbfeaf565aed923e12785b86760_amadey_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader.exe
- Size 610KB
- Sample261009-vt4y8ada92
- SHA256 4c8c51c5f24360c3403cdee8fa067b0800634abfe9c4180f878e85e7d50bd26f
- MD5 36bd3cbfeaf565aed923e12785b86760
- SHA1 d796d18d2ae4270049fd6c7f42f032d6c187b48e
- SHA512 f94fe241039b5c45e457838809429629d34d32edc32d42d29ba2a798d9d3e3189b094cf84c44ffb081a7a022bdf394fe3bc8bb1ff07db943fe71ffea4b81b9a9
- SSDEEP 12288:/8EQJsjj5Jj/dDrncKKMFkC3TkSGU517xnpCuTPsNr6tSR:/8DYj5BdHncK+0B5TpxTPsNOe
- TLSH T1B8D43A21645AC23AE6B551F0067D9E5A906EBD2C5F700ACB97C00E7B5470EE36B36E33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-08_36bd3cbfeaf565aed923e12785b86760_amadey_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-08_36bd3cbfeaf565aed923e12785b86760_amadey_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-08_36bd3cbfeaf565aed923e12785b86760_amadey_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1144