Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/08/2026, 03:36
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-08_52fc49d12b0dc9693d0889e86aba71ca_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_52fc49d12b0dc9693d0889e86aba71ca_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-08_52fc49d12b0dc9693d0889e86aba71ca_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
- Size 1.5MB
- Sample260808-d5wnjszand
- SHA256 e81c1e16d6c3e639458daca5453a828371d916062e85b9a7a4018a99d9fa1f6d
- MD5 52fc49d12b0dc9693d0889e86aba71ca
- SHA1 155b6dac6e5828266a3c0eeda0fed1f2f2e74964
- SHA512 8629184b502dff76f5a7878845dcf30c6ec71fe6fb80bacb91538194230d97f1bf84bd55b8c907761237b758c4d2ba81baa54a4fe380d6cc99a801bc78d36879
- SSDEEP 24576:Us+Ze6iHvBkZM7SRJtg6dH3Su6oaLQ8vO2LNwpmRiSrDPteBV1H:ce6iHvBkZX+6dH3ovO1mRiuK
- TLSH T1B8659E01F6824431E5B285F9593C97B5EA2CBD200B65DCE7E3C4286E02F95D1A63DE3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_52fc49d12b0dc9693d0889e86aba71ca_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_52fc49d12b0dc9693d0889e86aba71ca_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_52fc49d12b0dc9693d0889e86aba71ca_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1664