Analysis
- max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/10/2026, 21:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_a545d6d6db7fafe74678aac99a9a3910_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_a545d6d6db7fafe74678aac99a9a3910_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-28_a545d6d6db7fafe74678aac99a9a3910_amadey_elex_luca-stealer_njrat_smoke-loader.exe
- Size 4.6MB
- Sample261029-1qkdastscy
- SHA256 a852be59cbc0e2c44640ea9b1bb4fe48ea062976b49236480affdac6775b00c3
- MD5 a545d6d6db7fafe74678aac99a9a3910
- SHA1 4a39c9fcfc52e8f63f793a2a5178fa864f54c678
- SHA512 7e7442aec6b8dacf1366ae1f58ded09d184696aadec68c9573cc2299c7310fe2dbc1b239e81607f47b68af70c80cd87c4e38a7fab6a6c8163cccd78aa27b7682
- SSDEEP 98304:81bVxgv0bGqkTFBglptbqrlzRPWVGbCBrCU:AVKFBg1qhzR7
- TLSH T137268E217601C126EA8241F2572DFFAB465C99324B6600D3B6C85FAFA6346D73B31F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-28_a545d6d6db7fafe74678aac99a9a3910_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-28_a545d6d6db7fafe74678aac99a9a3910_amadey_elex_luca-stealer_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-28_a545d6d6db7fafe74678aac99a9a3910_amadey_elex_luca-stealer_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5052
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_tables_test\mob_db.txt
- Size 718B
- SHA256 be7d8de38fd6b1f8beea971b49c73db2ac603b377a81b6b9bfeade06c67c3b4d
- MD5 b30549662acaf8aa35195aebcb1a7797
- SHA1 d71a0d302776044b80951810eb3e22e50b267c8a
- SHA512 9ce2a62dbcc4a09b967923ae5fa3d9c093633c537b715cafc6e32da0c19779a351221c7cc22471332e08ace9c5f2229b92ab96993f1c8e59fa0d26acc31d5ed0
- TLSH T16001C0E1A5A993231ACA1078490A810F3B38159DCDA46EF8D338B895769ADC9278A553
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_config.txt
- Size 4KB
- SHA256 cdfa7b7a5b7fde0e0d799d0b996892245cf5937f6fe2f7d33c69359bb935e81e
- MD5 81ebf1237f4b5646ae2193914fb804a3
- SHA1 33a896dd2d1dcdc0a4129321f73352a2a9d22339
- SHA512 a2885fd5fef0928e4470f8ae231ae7d25230542547f1264a2edc804ebc82ff52d6616a0fea36c0e62e17e275f1c6bc2ef206e9dee3bc25768a625fe3635f4592
- SSDEEP 96:4VLT2Y642Yv2BwuA80tZ9jH88ikaJ1gxi/HLrnDpP3r:4VL1644wuAP9oRJ1siP/nd3r
- TLSH T17BA11C53530423738ED77B80BA1B26DA7935C005A97944A0A59D51D534C6C3FD3BF0DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_mob_db4.yml
- Size 132B
- SHA256 2241880740f3441bc4db18dad727853ae193cc8e466d84ce8172af612dc6d3ea
- MD5 d8fb41060ca8cf2d0f64dd3096c00e3f
- SHA1 c61f04b35320ce3620df255ce0e481027a50d624
- SHA512 f913f59194063421f27b5d38d68fd3060724b69c72c9529acc43af7110721725f8cf0179ca228efb21c907331902ca1c37d5412bebd4b3f2744acb75f13f4d56
- TLSH T13EC092AAB20681832274C5304926260A2A0ECBE7C5164B3BFBC83C847F0E20775C6A93
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_mob_db5.yml
- Size 128B
- SHA256 9a93da64b764ac0eb7b6f5928a9cf25b1470dd0bc9f76ec8fe20c64e3d54fe00
- MD5 9d0e8407a6c0acc58a27123fd9261101
- SHA1 fd404f35eef67087a6cdbbcc02ff93194c2dc3ac
- SHA512 102cccefc1a206b3955b805e7ed910a3894845c42097f470c91d58730a84e06696270dbf790b7619cc9505f9219f35a2d84d025c93e2bd809fac20c3e4d07429
- TLSH T1A2B0929CB212C10B627481B04DB522082A1ECBE3C8114B3BFBC93C887F0715A71CAE83
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_rules.txt
- Size 4KB
- SHA256 5470528063f13773312527f8a24c673cd8a6dab9d7116bf43197cf286759d601
- MD5 da79edb19dd78a388e2b5c78429e36be
- SHA1 45d807eb99a59168fd5959df9a816f860d826801
- SHA512 8b9d33c80229cb7f92186cb53f2bd2ffccda0b7caa0b91baa9608be34583a53297ad4155c5d9e20a787b56b0254a532fc50960a9f87be04a001768c471478a5d
- SSDEEP 96:RVLT2Y642Yv2BwuA80tZ9jH88ikaJ1D7izHLrnNpcm:RVL1644wuAP9oRJ1Pi7/nsm
- TLSH T175A11A93830423738A977B80BA1B67E66935C409BAB948A4959D60D130C6C3FD3BF0DF
- MD5 SHA1 SHA512 SSDEEP TLSH