Analysis
- max time kernel
150s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/11/2026, 20:01
Static task
static1
Behavioral task
behavioral1
Sample
2026-11-03_5803ee933a34cff20206c825ab76108b_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_5803ee933a34cff20206c825ab76108b_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-11-03_5803ee933a34cff20206c825ab76108b_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
- Size 165KB
- Sample261104-yrvvbafv2m
- SHA256 fbdf1af1c29fc06c03fe2a6836a0d7110527bca8fc4d0c649e90fc7bd8950ba7
- MD5 5803ee933a34cff20206c825ab76108b
- SHA1 bcfecc77f1ab3c5f6788fe8a0584a796ffd67eea
- SHA512 bec40bda72c40c940e74518bc80a683f94c3ed813fd347fcc2b0d8fbab3015cce9df2ffa151efdccef5fc63d4dda8250b3d7db432d15b1b6172959976752d74e
- SSDEEP 3072:5beID/DDGeQKo4rGvEZQz30wRpEzXPmxRcKZ9Mj97Y4GS+hGLGrHr1n336+:5beIDP8KFrEAQwXPm4KZKj9+13K+
- TLSH T1B5F37C2079C1C073E5BB193019F4DE729A7EF9310FA449EB639903390E616D36939A7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_5803ee933a34cff20206c825ab76108b_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_5803ee933a34cff20206c825ab76108b_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-03_5803ee933a34cff20206c825ab76108b_amadey_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4888