4d84c4161d878942e896891486c7737c73bdb135d6cfdd59fe62d9e9585ad386

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 03:10

Target
2026-07-30_98930f6f4e85af7bdd1134d71c02a79a_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Size 11.2MB
Sample260730-dn17psybje
SHA256 4d84c4161d878942e896891486c7737c73bdb135d6cfdd59fe62d9e9585ad386
MD5 98930f6f4e85af7bdd1134d71c02a79a
SHA1 0c1379922b986956219eef1259b9dcb1938cffb4
SHA512 57357654da54e2a1bacfb4aa3c95489a84639234f0b02e34e489b0c2efd1bdd67b0afb0b18cdf3bf6770b27fa084819f51f02b0a8b2f5060221186be764c0deb
SSDEEP 196608:mTgMN7TIaWuuvigQ6aSE6fBuCbChheimhXLr35:0NIzuuvigQNSE6fBuCbCnUX35
TLSH
T1DBC66B22B245C032E55039B1B86F7A7A63207D7B937084CFA1D1BE6921F56C24B76F1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral1/memory/940-0-0x0000000000130000-0x0000000000C63000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/940-0-0x0000000000130000-0x0000000000C63000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2040	940	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\2026-07-30_98930f6f4e85af7bdd1134d71c02a79a_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_98930f6f4e85af7bdd1134d71c02a79a_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"
1⤵
PID:940
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 940 -s 200
  2⤵
  - Program crash
  PID:2040

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 940 -ip 940
1⤵
PID:1064

memory/940-0-0x0000000000130000-0x0000000000C63000-memory.dmp

Download