Analysis

  • max time kernel
    148s
  • max time network
    141s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/10/2026, 21:51

General

  • Target
    2026-10-28_a545d6d6db7fafe74678aac99a9a3910_amadey_elex_luca-stealer_njrat_smoke-loader.exe
  • Size 4.6MB
  • Sample261029-1qkdastscy
  • SHA256 a852be59cbc0e2c44640ea9b1bb4fe48ea062976b49236480affdac6775b00c3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-28_a545d6d6db7fafe74678aac99a9a3910_amadey_elex_luca-stealer_njrat_smoke-loader.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-28_a545d6d6db7fafe74678aac99a9a3910_amadey_elex_luca-stealer_njrat_smoke-loader.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:5052

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        mob_db.txt

        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_tables_test\mob_db.txt
        • Size 718B
        • SHA256 be7d8de38fd6b1f8beea971b49c73db2ac603b377a81b6b9bfeade06c67c3b4d
        • MD5 SHA1 SHA512 TLSH

        maxyclaude_test_config.txt

        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_config.txt
        • Size 4KB
        • SHA256 cdfa7b7a5b7fde0e0d799d0b996892245cf5937f6fe2f7d33c69359bb935e81e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        maxyclaude_test_mob_db4.yml

        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_mob_db4.yml
        • Size 132B
        • SHA256 2241880740f3441bc4db18dad727853ae193cc8e466d84ce8172af612dc6d3ea
        • MD5 SHA1 SHA512 TLSH

        maxyclaude_test_mob_db5.yml

        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_mob_db5.yml
        • Size 128B
        • SHA256 9a93da64b764ac0eb7b6f5928a9cf25b1470dd0bc9f76ec8fe20c64e3d54fe00
        • MD5 SHA1 SHA512 TLSH

        maxyclaude_test_rules.txt

        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_rules.txt
        • Size 4KB
        • SHA256 5470528063f13773312527f8a24c673cd8a6dab9d7116bf43197cf286759d601
        • MD5 SHA1 SHA512 SSDEEP TLSH