7b2fed4aae79fdd91c49f0bd9ffb4edbb70efb0fa380abda9331ca60d050623a

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 10:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-23_704ca8e802497da296991c85ff207e68_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Size 3.8MB
Sample261023-m226labs2x
SHA256 7b2fed4aae79fdd91c49f0bd9ffb4edbb70efb0fa380abda9331ca60d050623a
MD5 704ca8e802497da296991c85ff207e68
SHA1 88155020883ec7472028c1c7479f8135b860833d
SHA512 cf2d0cc9f6d2d140afea610c168597076d89cb04500561c2efb1b83b94d47b722f0d86090085c0fbe1dd89fb3c9f5a3f8b1954156d3d553873114fdee6879dc2
SSDEEP 49152:Jjj4+nL8pRRbUZrx2VBGKps2tTKjjjjjjjjjjjNqwV0OQJDBvVNTqP8qrTJ15rKg:zLqcgTtTKjjjjjjjjjjjD4VQeiDO
TLSH
T13F063A20E6429129FCF700F79EFE4A9C651CFAA04B5964D791C829CECA55BE23D312D3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-10-23_704ca8e802497da296991c85ff207e68_amadey_elex_luca-stealer_njrat_smoke-loader.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-23_704ca8e802497da296991c85ff207e68_amadey_elex_luca-stealer_njrat_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-23_704ca8e802497da296991c85ff207e68_amadey_elex_luca-stealer_njrat_smoke-loader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

regasm.exe

Path C:\Users\Admin\AppData\Local\Temp\target_resolver_unit_version_fixture\Microsoft.NET\Framework\v3.5\regasm.exe
Size 70B
SHA256 53a71e8effe71c11a5fec471c96afc540cb7228a8b8d5076f9c99000fd7db3b8
MD5 ebdff144a0c1903bd26d1819f2cf55b9
SHA1 39bac0f75767c54d2b7fbba12c45c994fd30a8e0
SHA512 5a3ad5b954dd320a9abf3950ae299fe0d6ed646563726eaab588d8024d19b83e2dd235e5943410cbbb3eef59c77893755d408f7e3ef78e6abef4e74d35ec0b13
MD5 SHA1 SHA512

Submit Download