Analysis
- max time kernel
150s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/06/2026, 22:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_5cd2fc56808b55dc8adf3931f31bfa0d_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_5cd2fc56808b55dc8adf3931f31bfa0d_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
General
- Target 2026-06-28_5cd2fc56808b55dc8adf3931f31bfa0d_amadey_elex_luca-stealer_lynx_njrat.exe
- Size 10.1MB
- Sample260628-19j7msft4w
- SHA256 e6a4b9731556eaf0209da998fa4b4c4c09ed327de41d0b5c4c5b000bf81406e3
- MD5 5cd2fc56808b55dc8adf3931f31bfa0d
- SHA1 86a78ffae611b2f0b82c1cb3c9385a5c8253cf8f
- SHA512 edc602c6116aab111dc43a8d4d021b0326925f37d0aaa7bae870002180ea5ce54d14917d01a255c55f1bd77ab5f5c816921941f6cba2f108bf2349b6900505aa
- SSDEEP 196608:w5TaWx54+KdW9UW1tfiiad/7PBoZisuwbZ49ofMSa6Oikoptn2IGCZh/VDR83:ETaWXUWHfi3d/7PBoZkoUAT2IGWh/1Ra
- TLSH T13EB612C13781F821C35A11718C29B7B5825A69303710E9EBFF9F7AD54E685C1EEB0A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-06-28_5cd2fc56808b55dc8adf3931f31bfa0d_amadey_elex_luca-stealer_lynx_njrat.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3668 2026-06-28_5cd2fc56808b55dc8adf3931f31bfa0d_amadey_elex_luca-stealer_lynx_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-28_5cd2fc56808b55dc8adf3931f31bfa0d_amadey_elex_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-28_5cd2fc56808b55dc8adf3931f31bfa0d_amadey_elex_luca-stealer_lynx_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
PID:3668