Analysis
- max time kernel
148s - max time network
111s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/07/2026, 04:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_77758316d20256c849566f45680c0570_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_77758316d20256c849566f45680c0570_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-16_77758316d20256c849566f45680c0570_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
- Size 589KB
- Sample260716-e3spjscz8n
- SHA256 addff17aa1f8701736702b1cb023de6c00ace947d26b1dc6a6369f98ee64bfd4
- MD5 77758316d20256c849566f45680c0570
- SHA1 ddb936ad10beefcaf97f62f55328fc234641359c
- SHA512 45e5f89f2a1046c3191d7aced381abdcb744af6cd0242edd4a0426da9f0d604bde937a7131cb016c58bb9b9175b878b4fb060c2691f856d2ca17aaae2bfbf348
- SSDEEP 6144:ZgwAcOkDsIdU/0PcYD+DHQwPQGJTga8qdfeV4/9Us/DbVao4qqPIBXtHSWENLVxU:YcOkjPcYD+Mwz4MnVWqqPIBONhxsUe3
- TLSH T12BD4C4E16240F55FF2D09A336FD88B720A79F92DC5CA915767802FAA19314F26732633
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-16_77758316d20256c849566f45680c0570_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-16_77758316d20256c849566f45680c0570_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-16_77758316d20256c849566f45680c0570_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4852
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\log.txt
- Size 6KB
- SHA256 24417fa41ef5af73794c76d6c301f42142e51ee297f93cdcf89dc2719a2e89f4
- MD5 469be2100e7df56e6362cc89689b9a04
- SHA1 57aeebf646264e6843d0879157925589fbd886b5
- SHA512 72cd6433963919905669d263493e4adaecdd0e14b8ee4cd28ae31f546fffa90e0287fa686c94ea6297c53e85d5e76c6d91d7118bf976a76c292a2d05a6d04566
- SSDEEP 96:oWHYygFvvvvJJJJJJJJJJJJggggggggggggaaaaaaaaaaaaa5555555P:IE
- TLSH T1A6D1626F1F8F7FB6279620B4A35C0465214021948DCB2E5429DE780D6A9CA7CF393DD7
- MD5 SHA1 SHA512 SSDEEP TLSH