Analysis
- max time kernel
150s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/08/2026, 07:48
Behavioral task
behavioral1
Sample
2026-08-07_1826a0570037e86e8773dcf9414a5764_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_1826a0570037e86e8773dcf9414a5764_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-07_1826a0570037e86e8773dcf9414a5764_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
- Size 10.7MB
- Sample260807-jm38kaef69
- SHA256 fae1a4150c001a046907358e2fab503c62f941a6a8d851f0fc7f2bd5317dcda1
- MD5 1826a0570037e86e8773dcf9414a5764
- SHA1 1dfe2056d0ad378d07a896d6cc680624c47a19ba
- SHA512 0de065751df0e500d647804f2d043f5e584378b30ceb2fa973ba352a22da25df223bbff20d3b4b1cc0efbea53016543c1e721129eeeed8fdf5f38d1d2f7888d5
- SSDEEP 196608:xKXLAGOearik86KSA+XBuCrCUCV6WaV3LvQB:8U3earik89SA+XBuCrC/U30B
- TLSH T199B69E32F245C036E55012F1685EAB1A63207D79177088DBF5E1AF6E22E96C34B36F1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule behavioral2/memory/5424-0-0x0000000000060000-0x0000000000B0F000-memory.dmp UPX -
resource yara_rule behavioral2/memory/5424-0-0x0000000000060000-0x0000000000B0F000-memory.dmp upx - Program crash 1 IoCs
pid pid_target Process procid_target 1104 5424 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-07_1826a0570037e86e8773dcf9414a5764_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-07_1826a0570037e86e8773dcf9414a5764_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"1⤵PID:5424
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5424 -s 2522⤵
- Program crash
PID:1104
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 5424 -ip 54241⤵PID:4516