Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/07/2026, 13:11

General

  • Target
    2026-07-09_034ef5dc5e441c8bc6f1bcb0627c212d_amadey_cloudeye_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat.exe
  • Size 3.5MB
  • Sample260709-qe8xeabs4m
  • SHA256 7bbc2fcd5928f29ffbae5b268d101c1ff1692c5e3b06dcfcc5964497eb9ea467
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Indicator Removal: Clear Persistence 1 TTPs 53 IoCs

    remove IFEO.

  • Drops file in Windows directory 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 60 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-09_034ef5dc5e441c8bc6f1bcb0627c212d_amadey_cloudeye_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-09_034ef5dc5e441c8bc6f1bcb0627c212d_amadey_cloudeye_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat.exe"
    1⤵
    • Indicator Removal: Clear Persistence
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:5400

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 54698b8b2bb719e86debd2d3dcb514a4d1be81d1c01ed8f545fa48e424d180d3
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 c772cdab326559556f02483421f5a57ef95341f595cfaa3778f7c0b565343ed1
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 8970508944f6aeb097365cbc2c4ad173a50eb86c87ca5c5bb4e8f12e1c458d5e
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 213B
        • SHA256 1e12566046eda2c342dd2cd38a1da93fc49dbf85ddf6f1606ce11a82364d4b2f
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 73ebdc98245d0226ad7a3bc175d819a1aa9b4c921dd1e403ac3c093d94bd8503
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 adfc754450cac8efadb059dc95152b00c2e8da0185e0ad310ff0f4be90152efd
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 db8bde8fa9c211a71b54697c0c62aeaabbd9197d9f3fe05ddebe88d5beb51f23
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 d8cda76a8d81adb963cb0c8f1876740d0ca972f5f4839c7a6b732321447b19e1
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 3a8d0152dcd020f678f1ef30017dc59a3f98ba1c4e6dc77d9d45395393722777
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 257b5a936fa6d270faed6bf7adbee02c3854d7cfe3508daab39a6039f266445d
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 c11c2f2733a3b97ead436153d7cf877bcc16dcf6d3861c7a5567d007d0d8d35f
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 c2ed13f5401cb5656b3946084dede87251773b3413acac972b0c1cbef20c7d47
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 239B
        • SHA256 07043e386a5ce63ef8a3c9f2fb1500dc1aa6ca0b6c1cd941c7dab2ec35d23d22
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 2KB
        • SHA256 7d1f9412b2028eafb34cefa2089906fa46d6220e4d87b8a8237c27264851dbf7
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 265B
        • SHA256 c11f4639cc14ffdef529a976a51a688c03867a15e90303131894f26575219db7
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 291B
        • SHA256 832f7a4a75d1c2a6e7cdb8f0a852f3fb541e92430f5b06b003d373e8cb45ecb2
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 134B
        • SHA256 43b3865be40af173b23cb81fc67caa03b67720f2e0c26783d289f4dba4e0b82f
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 318B
        • SHA256 c13602917e060efd4cf32a1f09e76d764cef5d7109a7b0ad2d7f1ad4b72be9f1
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 330B
        • SHA256 3236c3842b1833adc894649b891e32790547818f40d69f6fcee46fb0055c6b58
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 370B
        • SHA256 047b8bf16904b870868cb165964e97b087ed4ac42ae59dc0c70f1a7ce5cd0be8
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 396B
        • SHA256 c13f5de663f2717ef18f28dfeef984706e51e9cf33133a04e7582410944c6b5f
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 423B
        • SHA256 96ac15b3b1e2891161eac389b6465fef147aff0d140dd57ab2eff5c238db32bb
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 449B
        • SHA256 db3044f5471c167d52b3f006b2471a5dd337ae524427a04cd078e99560a9b320
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 475B
        • SHA256 d3de22f6a05d44be1465c59c747463641160e5188e9bc929e9eb81c925db9324
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 501B
        • SHA256 c3cda86484123fcc668d381e54113eb328c3ea8ea95c7c42ad84e6a540e818dc
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 528B
        • SHA256 99026760d6d85801a084e7a735f5052f9a7818b31317fff027cbef42a1a5ee0c
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 554B
        • SHA256 fb133f6ba383c7090413eeadb81afee17504a7acac26e795aaa35cd01aebe10b
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 580B
        • SHA256 c90b4685bf936f61e95a76c531ad64bfafbc15eaac7a607b60a06a4497d3dfad
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 606B
        • SHA256 a73d23bca46d8b42b1cd6d91b276cbd993b38851096be400f46b68ecd4245f02
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 633B
        • SHA256 2a35fab99e374f7f8253b75a1a76c32bf4108a163dec8bc64baaf9dd0c5216e7
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 659B
        • SHA256 8ea0b01736a5719fd11aefe9b87df88639243fdd89324c3be68114af10d43766
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 685B
        • SHA256 e8bc9132680c0c6c6fd1fb44bcc0e09a362792dd10c6f9b79547089339327a1c
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 711B
        • SHA256 e5f5a6a27e177cb4467ad1a929c99c659072dbf307953b260d97e6e308bd57d6
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 738B
        • SHA256 0a936d26c1f62cf3b92c70536ace9d660d6243b630f098fab44201e369c8315c
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 755B
        • SHA256 6a166fa30edb47b6a89f671a405726b5af78407bddea04373907deb313ccf7d1
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 789B
        • SHA256 a9780c589efb18096e85aff3fdd17cd29da40f3184a6f24f7b066937f1b83816
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 814B
        • SHA256 b982b60b07ca5ccc7f589443aa0c87d76f4fbf16556a9b4c8145e3f792ce47b0
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 837B
        • SHA256 464c2eb4f9d72c28abf631ac8b92886560eb3bab69668fb4295828a54e719642
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 865B
        • SHA256 25a20c3792413a755b0ce07b548b77c5eb4413f489d953985fffcb6221276d1c
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 890B
        • SHA256 119af46df82ff349899c6465a4743192c1ff0f56ea22f6be351e6dedc7c3b4e1
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 915B
        • SHA256 0b7654f68ae08fdb9972688434713153473cc04400b2878407779dcdd6615ad7
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 941B
        • SHA256 a22c24b901c7e7d3ba2a2cbe1c1297347f6d15a6f3c52afd9e8a52b6c5d78893
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 966B
        • SHA256 2a2e53ed9a9c76315e7ee8d8f5a5a5de97c54a9c0c0e4d948e3e2f266aaec1f8
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 991B
        • SHA256 a8df6face665699d7fd39d4086f6b7caadcbdccf7e2cc7e0c5a0ae49ff945aac
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1016B
        • SHA256 084b47ff520643f49fbb4cb3e2f6423d4c6680fe4d8282102b3e6125fdf46635
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 7d42f8049651788bfd0f4cb3bdce3030fab2a3748d81fbf5033699ec6b9333ac
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 903bf713c76fc048bbb07a6d3fd7f10b58d405c8d5760091cf7e5bdb91176d60
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 9ec7f9f4f2a3a26ef931f5cecc6a327ecffec395a9561300b374c164c96fe447
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 267db2ede56272b57c621e524f2adef3d145393f81fde4e301f21327933ee731
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 54B
        • SHA256 4a24a84c73c3c67617bfd37ea860e7ccf9e51edcb375067de2c9ba2855e39bb9
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 b19b5b53380b88ab4a23c5c144ea528f5f76ad748946c1ba12da3053a1e32687
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 f53699b5986b22827eb53c933ce5871138e7c8fb42c6993f2b83af405ef9d794
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 3cb7275dee7b03ab6384cf6f5be5b0c7ba924b7ce5181a9b7b1c906fe1df77dd
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 6f21c2009019f8effbf0c1f76c8557b77b66974f3b48e0ae43a58241ce42c85a
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 6a65ff577004100f03867c5dd191092ea3da82ca3044c877778cfa958ee4dedb
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 fcdac84bfdc6576aaa888134febf6a9ccf0848faa7933272e186f03d7738b1fc
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 a55dbe55952a620f23446a460135724b7965ef9e6c83db4fd2b2be92106b7488
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 20472157ea150eeb8758454c6e9aeac2ee4d129734f6100a76e6c0f6cb2eace4
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 ec582a7298afccf49527d70847b27e9eb5ed2a320e730b8ba1111e67c27afdb1
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 a99817819e17c8fd6ca4dcc3b4f78c0a590cef3a0122cdb079c618a5bb3f8cfc
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 160B
        • SHA256 d72b612a475d8f86a6506fd28e619099403d3b2f663b872e524ee29e7493efb0
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 ca9b0b680078b311a1d4a3712911b5746e6064bbffb3edc2e2169bd28e2c8458
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 71f598294741657bc2fdea9e546e6f69af0f715ff72152386110a74a9c46fdbf
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 493bb6f1d6aa9eb4d64d8e0c66599aaa2984a6bb20a1663de0a067c46264e9f8
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 b1be21a803cc6bf3bc5b1aa9ebc61bfc65fa5d8484ec34c848b983c9d24d43a9
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 15c0e0da553c00030e8af7a01c0d8759e6d79448b63480985e190587cf0a428f
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 a205bfe15f3f2cdc2735c054c19bfc1eab791bb6b56fc53bee9b371a79e95eee
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 fa6e335a813ad3efb58f19f1c05a4a580745f845a8dbd97a1821dc76cb09a2b7
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 ee46d5afb3e75f443393151add4eb8e4fbacf888c622058538f7262ce03c2978
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 da6ef2817b918459c33a2a2d4facc3f60912154a53a7be36a14216bd63262261
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 d9601632479f4041f03f304c47097ceb83f2003881e946e4b54d405778c1ef60
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 3d9212d94cf91f92e9da246e63c02ad85a01a0a5ea3282f5fbf28383a8abbe37
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 56adac3addf45a2e37ff730080351afb73d1209bf6320e793a74cc9d6e34748c
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 304da7869fd7ace7dc1d58cc1e9bc578880ad0bb68778ff3de8443cc3c2d7a52
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 186B
        • SHA256 92174224585957ed394e1ba1c73ff5fd0676d342a3277a73bb81c249712c7be1
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 d8c7116938e56023cc47406c9902c08ab63f5a5ffd9cbbd4434f1474d72b3352
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 c202165afff52db4405deda6a1e979bacf2f927b5c417b9b2933aef74a9abd03
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 314e6f424eb787b2e62715aa561928101ffff9761b27db18afc6eb31fa522432
        • MD5 SHA1 SHA512 TLSH

        dkjkgbbld

        • Path C:\Windows\dkjkgbbld
        • Size 1KB
        • SHA256 a849008d1c071fc21a5e417c3fd882e5ea099bb159808403aa17c51c848e2512
        • MD5 SHA1 SHA512 TLSH