Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
24/04/2026, 04:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_897198dc32b663c59da71e0fadf6c83e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_897198dc32b663c59da71e0fadf6c83e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-24_897198dc32b663c59da71e0fadf6c83e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe
- Size 219KB
- Sample260424-eye8naex41
- SHA256 4fed7265ef8e21d1bb493242e73401d204d8273d68575c766b86bdfa7e2b3ac4
- MD5 897198dc32b663c59da71e0fadf6c83e
- SHA1 cc8c3f0081e5754fd4b960a3174bc4a1ac216754
- SHA512 ea861e3d445e69ac117b74a4b97cbe5e8f329636ffb5a870256829353af27e223425df27fcf67ec543f332e2821090cc73837baaeecb4e8009b8150b0c944712
- SSDEEP 6144:i/7UwZ0wnbP0vjC3ducFnDq8zOgyVrB7qTOx9jZ7o:jOnnSPcFnD5IOOxNZ7o
- TLSH T17C246C1275918431D872157605F8ABF5AB7DBE304BA689CB67D00F7FCF302C19A35A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-04-24_897198dc32b663c59da71e0fadf6c83e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-24_897198dc32b663c59da71e0fadf6c83e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-24_897198dc32b663c59da71e0fadf6c83e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2784