2f53029e9c6588728d5a34b488220ae7f165d2acb4c9bb0a1b7d2b4487f02858

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/07/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-30_6984e8a3be34274fc0f837c89009b363_amadey_elex_luca-stealer_lynx_njrat.exe
Size 7.1MB
Sample260701-e585bagt4y
SHA256 2f53029e9c6588728d5a34b488220ae7f165d2acb4c9bb0a1b7d2b4487f02858
MD5 6984e8a3be34274fc0f837c89009b363
SHA1 93e44c1b80a68cf7f159b5bcf4531d5755a2dbdb
SHA512 0e61d37624b7ba8bb0178937b5b413288f06c0ca0da2c3a176524f53f498a52cf440644eb21b9bed6ef1fbd3b160980974884530c80b6395500e87e914d56289
SSDEEP 196608:r5TaWx6EwSwj1tJtF/He2CJvEmg9mcKwhXqBf3Df:tTaWoEwSa1He2CJvEmOmRqcTf
TLSH
T1C47601C17341F822D71A12708C25BBB5825A59303710E5EBFF8F36D95E686C1EEB0A76
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-30_6984e8a3be34274fc0f837c89009b363_amadey_elex_luca-stealer_lynx_njrat.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1104	2026-06-30_6984e8a3be34274fc0f837c89009b363_amadey_elex_luca-stealer_lynx_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-30_6984e8a3be34274fc0f837c89009b363_amadey_elex_luca-stealer_lynx_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-30_6984e8a3be34274fc0f837c89009b363_amadey_elex_luca-stealer_lynx_njrat.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
PID:1104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads