Analysis
- max time kernel
149s - max time network
141s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
18/05/2026, 21:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-18_b73cfaf65651db8e90bb14cdb0715bda_akira_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-18_b73cfaf65651db8e90bb14cdb0715bda_akira_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-18_b73cfaf65651db8e90bb14cdb0715bda_akira_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe
- Size 2.1MB
- Sample260518-1eezfac181
- SHA256 285c0d3377cf768cadcd55de37e059f514c2f49672015da96167239c28dc2d09
- MD5 b73cfaf65651db8e90bb14cdb0715bda
- SHA1 73877903e7c654f96b8bbfee17d1f82acfff8065
- SHA512 7958705601bf559e96f4354c1fc12343f4481b8798a8f7cfcf78aaa263c6368ab14446808d75788d1849dc82e1bf5760840a54be8a2e8b6da995f98a9d00b997
- SSDEEP 49152:SYAbHHp7cFy804VdsJe42NzCBeoapipLSm5egyxlMPdlR8v4UC0Eg6ET7M/I:SP7wdsJe4skDa9l2/V0cETQ/I
- TLSH T131A5AE11B216C136E06391B0A96F9BF695AE7E346BA101CB73D01F295D703E36A35F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-18_b73cfaf65651db8e90bb14cdb0715bda_akira_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-18_b73cfaf65651db8e90bb14cdb0715bda_akira_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-18_b73cfaf65651db8e90bb14cdb0715bda_akira_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:6044