74bef409e8c6417ff81cd738ae9fd71fc95920bb50a44ace6e7bb152cd5212fd

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 15:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-01_8a5f00494c26c7a1c990010d74f0fe63_amadey_elex_icedid_luca-stealer_njrat.exe
Size 2.8MB
Sample261102-sy37daxt3n
SHA256 74bef409e8c6417ff81cd738ae9fd71fc95920bb50a44ace6e7bb152cd5212fd
MD5 8a5f00494c26c7a1c990010d74f0fe63
SHA1 ca090c7b947d022b7afd62d84df2a25c708c427a
SHA512 4a0dd2f305b71201ce0aceb36784636d72231e8c0aac322b686be456e67cddaf7774e6bfe107461f94a46239178b4e71f9a55471545a82e3ff0914d6142c72d8
SSDEEP 49152:7BgkH25Tv/voQFLkXoBMLvjrB3vm7Rb2MWNTGqgJ7RXS:7Bgd5Tv/ZFioyLvjrB3O7Rb2MeTGqgJU
TLSH
T195D57C2375A854AAD12307315D5DE3B6B2BC7D7C1E34C29B53E0BE2C2AF51815818BEB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-11-01_8a5f00494c26c7a1c990010d74f0fe63_amadey_elex_icedid_luca-stealer_njrat.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1076	2026-11-01_8a5f00494c26c7a1c990010d74f0fe63_amadey_elex_icedid_luca-stealer_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-01_8a5f00494c26c7a1c990010d74f0fe63_amadey_elex_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-01_8a5f00494c26c7a1c990010d74f0fe63_amadey_elex_icedid_luca-stealer_njrat.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads