d071f819eb085a20916098738478481e3b10b961d0e53b14fd7f80a9b8ab6ee1

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/07/2026, 10:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-15_02fd35deb89dab82035d5620ab644c02_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat.exe
Size 337KB
Sample260715-mp2pasdw8z
SHA256 d071f819eb085a20916098738478481e3b10b961d0e53b14fd7f80a9b8ab6ee1
MD5 02fd35deb89dab82035d5620ab644c02
SHA1 543feff0ded6551e3ce90cb6a8ff195cef3c355d
SHA512 94d593afe722b5b0eda26e5290c1139494085ac8480d38ac2eb9b20e43605706c682851d33545f448ed087d97abe7ac0bcb0b9d49582730c50f530b8148130d8
SSDEEP 6144:vwkKlbGUJLa8ePQEmyK8O0nxNKFsLMbP6jALX4kuWhMHY9AO8EnZ2AnwY:vwkECUJLa8e4EmyKpcxNK6wbzuWhMoGE
TLSH
T1E174AE1236C1C073D9B211725EA9EA21967EFD300F6569DB93D12B2EDF306C19A31B27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-15_02fd35deb89dab82035d5620ab644c02_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-15_02fd35deb89dab82035d5620ab644c02_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-15_02fd35deb89dab82035d5620ab644c02_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4676

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads