9fb5d85c1d5485b9e973ac110f5f11cd12dc93a4c0df2a385f4e782c7c6e0e44

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 23:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-04_8eef3317b5325fb0c5c7bf1d66c696e5_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe
Size 482KB
Sample260604-3twlvagy6v
SHA256 9fb5d85c1d5485b9e973ac110f5f11cd12dc93a4c0df2a385f4e782c7c6e0e44
MD5 8eef3317b5325fb0c5c7bf1d66c696e5
SHA1 c7641ca180909797926d15f79bec54e8ee266187
SHA512 29f1d1bda35b5e7e29b2b749d465f94df2fd5466e9ef9d2abc66f4d575b2542e8aab9021271e65d7167ac33c9a251c8d495fbb76bb5b1c36d5a1b2e10592c3c9
SSDEEP 6144:K/iUSZjwncjMvjC1ducFnDq8zOgyVrB7qT6xCIh4zDj2pS7QZ7o:iA0nnJcFnD5IO6xe6pSUZ7o
TLSH
T1C8B45A0DEA518433C42E2B31FDE4FFB4076D2AA02B7586CBB7D03A6B7A602C1D535566
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-04_8eef3317b5325fb0c5c7bf1d66c696e5_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-04_8eef3317b5325fb0c5c7bf1d66c696e5_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-04_8eef3317b5325fb0c5c7bf1d66c696e5_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads