cb42aae64f740913691c1055200bb0feb646c4a369492d8da445c5857c42d446

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/07/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-16_2993548704f2b5a5fa3c9621dccca75d_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Size 589KB
Sample260716-e6grfsc18r
SHA256 cb42aae64f740913691c1055200bb0feb646c4a369492d8da445c5857c42d446
MD5 2993548704f2b5a5fa3c9621dccca75d
SHA1 96f55235081b43f8c9ba74fd0fe41f21dfc46b51
SHA512 6f13f390fb65568d0cb8c94808abffa90f9f6c944ac821c1044013f8c92cf88dd8ad7336cee6015ba7eddb9c65aa6a0f0a5d57701cbf19173e61e10242237cb8
SSDEEP 12288:taTCNwMjDlc6/horFHJtunVWqqPIBONhxsUe3:QTCNwMFcpvL/xsUe3
TLSH
T137D4C4E16380F56FE2D09A336FDC8B721939F92DC5CA915767402BAA19310F26736633
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-16_2993548704f2b5a5fa3c9621dccca75d_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-16_2993548704f2b5a5fa3c9621dccca75d_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-16_2993548704f2b5a5fa3c9621dccca75d_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

log.txt

Path C:\Users\Admin\AppData\Local\Temp\log.txt
Size 6KB
SHA256 bb6d396f3d7b4183015bd9485189257ca13646743abed41062be0212c6c5f1d2
MD5 2de5ec76e5b8b673882a5ec9e478b6de
SHA1 8b108e7556ad6b46472796a32f03f51046a61c08
SHA512 8436a97cff5e0315518351f47b1cb40e2ad73e0ad761e5e786b7aca6610e5305306589a2a537c2643ce5cc62813c5847abca902c7d82fc8fad216908ff961ce8
SSDEEP 96:o6HSyXHQkQkQkeeexxwwwZZ/////////////iiiii77777777777777777P:mn77z
TLSH
T1A5D1C46F0E8E6FB607A220B4A35E207912011591EF874E542ADE741CA6DCE78F3D9DC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download