cb42aae64f740913691c1055200bb0feb646c4a369492d8da445c5857c42d446

Analysis

max time kernel
148s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-16_2993548704f2b5a5fa3c9621dccca75d_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Size 589KB
Sample260716-e6grfsc18r
SHA256 cb42aae64f740913691c1055200bb0feb646c4a369492d8da445c5857c42d446
MD5 2993548704f2b5a5fa3c9621dccca75d
SHA1 96f55235081b43f8c9ba74fd0fe41f21dfc46b51
SHA512 6f13f390fb65568d0cb8c94808abffa90f9f6c944ac821c1044013f8c92cf88dd8ad7336cee6015ba7eddb9c65aa6a0f0a5d57701cbf19173e61e10242237cb8
SSDEEP 12288:taTCNwMjDlc6/horFHJtunVWqqPIBONhxsUe3:QTCNwMFcpvL/xsUe3
TLSH
T137D4C4E16380F56FE2D09A336FDC8B721939F92DC5CA915767402BAA19310F26736633
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-16_2993548704f2b5a5fa3c9621dccca75d_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-16_2993548704f2b5a5fa3c9621dccca75d_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-16_2993548704f2b5a5fa3c9621dccca75d_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

log.txt

Path C:\Users\Admin\AppData\Local\Temp\log.txt
Size 6KB
SHA256 c0a49d85e992de1a91093fca53bea432eda15f4002d27e7d9df7d19113be02af
MD5 1127fe68898a3e237bb316ef76a05202
SHA1 f346a9a61ed0a66b81159f1cffd08e5f2d69b463
SHA512 6caed7c602ac959d1459da7e138c0d46a7a0c4bfc64fb18e41403a152dd2caaf4c0ffdabe07852fabf8070ca498585052f3bcdd47c4acb8d7e2a85f42b649265
SSDEEP 96:osHtyN6egegegegegegegegeWeWeWeWeWeWeWeWeWeWeWeWeWeWeJeJeJeJeJeJf:7v
TLSH
T18CD164AF0E4E7FB607D12474A34E20A5110165D0AF874E642ADE744D669CF78E391DC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download