1fb7d07f5c8b71aca4fa27703f4d898333b3cf4781a81b6441847b4029c36617

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/05/2026, 19:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-15_8883ce7a997e391f233c703d6daad37a_amadey_coinminer_darkgate_elex_hijackloader_luca-stealer_lynx_magniber_njrat.exe
Size 8.4MB
Sample260515-xrbk1aev2x
SHA256 1fb7d07f5c8b71aca4fa27703f4d898333b3cf4781a81b6441847b4029c36617
MD5 8883ce7a997e391f233c703d6daad37a
SHA1 5ded3ff897a4e3c95ce804eb74251158199c12a5
SHA512 aa703e72ceddd7a08b7af8add965872e4c7f9f89d288fa9a5e4b0bb17784e4948654541fe0cd1adf7f6ea624d3d0d8da9da20d2fe0c9998a82691ff72a08b704
SSDEEP 196608:k/149kpUughsytdGKHKYt9mPmFLOyomFHKnPp+:k8kpUug2yFHKOFU+
TLSH
T153969E313A8580B9D47101B28A68BFBED1BDFDB41B3901DB52C86A2D69353C39E35E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-15_8883ce7a997e391f233c703d6daad37a_amadey_coinminer_darkgate_elex_hijackloader_luca-stealer_lynx_magniber_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-15_8883ce7a997e391f233c703d6daad37a_amadey_coinminer_darkgate_elex_hijackloader_luca-stealer_lynx_magniber_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-15_8883ce7a997e391f233c703d6daad37a_amadey_coinminer_darkgate_elex_hijackloader_luca-stealer_lynx_magniber_njrat.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Settings_2026-05-20-20-55-53.ini

Path C:\Users\Admin\AppData\Local\Temp\Settings_2026-05-20-20-55-53.ini
Size 74B
SHA256 081427a5bb7eb4e315753b18c7ce28f532d9207dd3e9d411cc35e0383009a6d0
MD5 0932d96b5bb201f5f562201cefd6b4f4
SHA1 5f652cc2d0b732d79e18db380c5718baf0072e50
SHA512 a2fe1335e658e82303740c0e691fee6a90c29b49cd62b01b5db9f0f244bf308b7a235ba7431c5d1873808c661fc0b6fe695605da5b1c8700c5f73284b57a299c
TLSH
T138A02410C4C547074C00401FC075403C54D00D0C1FC13715CD3454041341D04D075301
MD5 SHA1 SHA512 TLSH

Submit Download