Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
17/04/2026, 16:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_791c701ef418ae1a569388e8fa5fb0c5_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_791c701ef418ae1a569388e8fa5fb0c5_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-17_791c701ef418ae1a569388e8fa5fb0c5_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
- Size 1.4MB
- Sample260417-vae6ragt9z
- SHA256 a982dd9c3d6682c9568eeb0c251d7717cfce504fd164cfb7220cd91a7e3ddded
- MD5 791c701ef418ae1a569388e8fa5fb0c5
- SHA1 1eb951a8a9fe52e57f3cf1fb1796ffb0ff7f9356
- SHA512 a3a2dfd47226ce77238bdd3414213841875e187d916b3edb333ab22e6d9c4f0de7dbe0b879cfba3fb8ce07917d2a57c94e94316cfc2e5c592c0e60946932b8dc
- SSDEEP 24576:M5HsjvByoyK/3ZUdEqxyAKc6pHYOKC9OAXO7Ts3FnOWBjx5Ic/3UlkIAytGuleQr:UQlRIEqxTzVWhOWBXBILleQCM
- TLSH T1CD65CF12B7D34471F56205B146AAE73EAE39B241A720CAC7D3D0DC645D622E1EA3F34E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-04-17_791c701ef418ae1a569388e8fa5fb0c5_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-17_791c701ef418ae1a569388e8fa5fb0c5_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-17_791c701ef418ae1a569388e8fa5fb0c5_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3588