Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 10:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_64bb7fe64479926ad5e0d969d0c7ac70_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_64bb7fe64479926ad5e0d969d0c7ac70_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-22_64bb7fe64479926ad5e0d969d0c7ac70_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play.exe
- Size 726KB
- Sample261024-mt19bseg74
- SHA256 da36becd7f4ab7c6456d0f40e88b1514c39c8404c429f4a3e7d8fca6b03d395b
- MD5 64bb7fe64479926ad5e0d969d0c7ac70
- SHA1 db1c60ac1b3eb8d5880182977ca860694c51f0e3
- SHA512 809d59c68a61c5fe4d0d8413be090ad30a1131926932e6d3d38998705d3330335df4d2636939878ded80676b0ca7b8a13e387fa92fabc2ba2987d77ac87c1c4c
- SSDEEP 12288:wUYJ9biqSJYT5Oi3nLICy1asXAq14KH/G5fzn5bDesMr6:tYJ9bDDpnLQ1VAq1Nfwrn0sS6
- TLSH T197F4022172C0C4F3DFB3193005F4A9B1997DFD701B6499EFA3946B6A5D346C08D3AAA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-22_64bb7fe64479926ad5e0d969d0c7ac70_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-22_64bb7fe64479926ad5e0d969d0c7ac70_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-22_64bb7fe64479926ad5e0d969d0c7ac70_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1028