Analysis
- max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/07/2026, 00:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_6a801d3f829e5b072510e510ec1fec3b_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_6a801d3f829e5b072510e510ec1fec3b_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
General
- Target 2026-07-08_6a801d3f829e5b072510e510ec1fec3b_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
- Size 1.6MB
- Sample260708-a3c7msgx6y
- SHA256 6d3450d07173fd3e7e1ad4a9595f6004d7b59a098f8331cb992d0c08b365f519
- MD5 6a801d3f829e5b072510e510ec1fec3b
- SHA1 6e23472a552d1d5c95386954c0d2113f9f77144f
- SHA512 73dae964f6e958cd805b1c89922856b092d51b17d933b63bc001ded70783b1933d2e2dae165e5f15f2cfaec1b9075e86b80a0d49f28dac2b55c0f3a49ff70937
- SSDEEP 24576:+uZNWMkznJZjLpPyCT/hz051dckw+1MCO6Wm/zLPFGn8W:tNWMkBLByCTZz0i/+K6bxW
- TLSH T16B85AF76FA419832D5B11330982CB270EE25966B076218E775BC075E3F790D32E3BA79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-08_6a801d3f829e5b072510e510ec1fec3b_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-08_6a801d3f829e5b072510e510ec1fec3b_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-08_6a801d3f829e5b072510e510ec1fec3b_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1856