Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/07/2026, 04:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat.exe
- Size 2.1MB
- Sample260711-e1t5labv8q
- SHA256 222949402d8131671c97e3a4dcf45bcb9b721a368dff0cf523fd824fae2db0ef
- MD5 87adafe4d03127a36112c33901958684
- SHA1 33e8ae86bc3985dc068d4e2a448d373b44a293cf
- SHA512 b93227e1d3721b00fdbc7eb4e37afada51293cb9630339a48e4af1f9cfb394dde485790eb17a5b76d58095928891118e0d27b429097a5e7c23d33d7dd1d73f03
- SSDEEP 49152:QSWnjI+y9VtlzwiUdoDcvXYfjTxFX+Jx1JYHD3rsRmxM:Q6TzwiuoDcvXUX05ey
- TLSH T195A57C217685C131E1622671596CFB7A81ADBE340F3045CFB7803B2EAA706D36E35E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1980