Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/11/2026, 12:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_aa02b6ea42c3a51e8d2211e4b95d9c77_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_aa02b6ea42c3a51e8d2211e4b95d9c77_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-11-01_aa02b6ea42c3a51e8d2211e4b95d9c77_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
- Size 1.3MB
- Sample261102-pegmgshv8s
- SHA256 0dc47c54ef2e58b8340054a4cc74f939fbc91189adb1eb56ee46806d03f14329
- MD5 aa02b6ea42c3a51e8d2211e4b95d9c77
- SHA1 c06e272b45f8b5a303d03d308cf7479ea032e3d8
- SHA512 805e80303ee26abd5a0bb0053b32957a5ef1f83da3019cf072a1b735add256b3299698bcc798a41d0c2f6c2ed5cd6466eb3b2bb0fdb0e5c262554e0c3dae3789
- SSDEEP 24576:tE6UbllcBJgYxT5WezNyBo4kx929bL3Hnx:zMlcLgUwecB+kn3Hnx
- TLSH T15A5559F26389E8ADD07317331B3692FC863DAC310871D55A6E90365E9A78FC27523B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-01_aa02b6ea42c3a51e8d2211e4b95d9c77_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-01_aa02b6ea42c3a51e8d2211e4b95d9c77_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-01_aa02b6ea42c3a51e8d2211e4b95d9c77_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4076