Overview

overview

6

Static

static

1

2025-10-16...os.exe

windows10-2004-x64

6

2025-10-16...os.exe

windows11-21h2-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    102s
  • platform
    windows11-21h2_x64
  • resource
    win11-20251015-en
  • resource tags

    arch:x64arch:x86image:win11-20251015-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    16/10/2025, 12:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2025-10-16_7b83021ec0bd5b828cb953281a1d9bcd_amadey_coinminer_elex_luca-stealer_lynx_njrat_remcos.exe
  • Size 2.6MB
  • Sample251016-p1fmbazthx
  • SHA256 fa5d154304b5e0044f1d592c39b4d645b59e22f154eb32a13a2b2b1196b30391
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
defense_evasiondiscoverytrojan

Malware Config

Signatures

  • Checks for any installed AV software in registry 1 TTPs 45 IoCs
  • Loads dropped DLL 1 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-10-16_7b83021ec0bd5b828cb953281a1d9bcd_amadey_coinminer_elex_luca-stealer_lynx_njrat_remcos.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-10-16_7b83021ec0bd5b828cb953281a1d9bcd_amadey_coinminer_elex_luca-stealer_lynx_njrat_remcos.exe"
    1⤵
    • Checks for any installed AV software in registry
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:228

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        check_new_version.html
        • Path C:\Users\Admin\AppData\Local\Temp\5568DC7E-AA8E-11F0-8594-6EF65787E07F\check_new_version.html
        • Size 1KB
        • SHA256 9845e6155bb86322d1c237c642580198e7330b91d61087649bd2dc4b219c5735
        • MD5 SHA1 SHA512
        Submit Download

        setup.dll
        • Path C:\Users\Admin\AppData\Local\Temp\D7CD8655E8AA0F115849E66F75780EF7\setup.dll
        • Size 5.1MB
        • SHA256 5846b403edd267905e9fe44868fe5d06714e97798049c3dcc19166d569fef1a4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/228-2-0x0000000077A00000-0x0000000077A10000-memory.dmp
        Download

        memory/228-0-0x0000000077A00000-0x0000000077A10000-memory.dmp
        Download

        memory/228-1-0x0000000077A00000-0x0000000077A10000-memory.dmp
        Download