Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/07/2026, 00:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_b3cd742866c634fc1010b426e28e9543_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_b3cd742866c634fc1010b426e28e9543_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-22_b3cd742866c634fc1010b426e28e9543_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe
- Size 1.5MB
- Sample260722-a2c59abp2x
- SHA256 9b3f7839845cd5c78bbd2476ff2785fa06a1ad6123a1fa8d85a77e1e3c84d849
- MD5 b3cd742866c634fc1010b426e28e9543
- SHA1 10b057d019dd1190824dafa4c39c1e962f815f64
- SHA512 3c5255ce4fd7e10c2fa3c51fe378aee48bdb4bd71307cd1ece14961e7eed3a363b8cb7c51a52ce2fecdb043c4a1bd97303478dc885d78bcb3ceca90e4ca76800
- SSDEEP 24576:LI2lmCZgCR0jzpQVIKIz0IrnsjbpQlrf:LHZgCRCQV7wQo
- TLSH T1636502507691C073D5B216331E68D7BA553DBC614F2485EB73C81A7ECE342C2EA32B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-22_b3cd742866c634fc1010b426e28e9543_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-22_b3cd742866c634fc1010b426e28e9543_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-22_b3cd742866c634fc1010b426e28e9543_amadey_avoslocker_elex_luca-stealer_lynx_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:900