4d84c4161d878942e896891486c7737c73bdb135d6cfdd59fe62d9e9585ad386

Analysis

max time kernel
150s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 03:10

Target
2026-07-30_98930f6f4e85af7bdd1134d71c02a79a_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Size 11.2MB
Sample260730-dn17psybje
SHA256 4d84c4161d878942e896891486c7737c73bdb135d6cfdd59fe62d9e9585ad386
MD5 98930f6f4e85af7bdd1134d71c02a79a
SHA1 0c1379922b986956219eef1259b9dcb1938cffb4
SHA512 57357654da54e2a1bacfb4aa3c95489a84639234f0b02e34e489b0c2efd1bdd67b0afb0b18cdf3bf6770b27fa084819f51f02b0a8b2f5060221186be764c0deb
SSDEEP 196608:mTgMN7TIaWuuvigQ6aSE6fBuCbChheimhXLr35:0NIzuuvigQNSE6fBuCbCnUX35
TLSH
T1DBC66B22B245C032E55039B1B86F7A7A63207D7B937084CFA1D1BE6921F56C24B76F1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/4860-0-0x0000000000080000-0x0000000000BB3000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4860-0-0x0000000000080000-0x0000000000BB3000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3076	4860	WerFault.exe	88

C:\Users\Admin\AppData\Local\Temp\2026-07-30_98930f6f4e85af7bdd1134d71c02a79a_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_98930f6f4e85af7bdd1134d71c02a79a_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"
1⤵
PID:4860
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4860 -s 252
  2⤵
  - Program crash
  PID:3076

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 240 -p 4860 -ip 4860
1⤵
PID:4204

memory/4860-0-0x0000000000080000-0x0000000000BB3000-memory.dmp

Download