Analysis
- max time kernel
148s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 03:58
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-08_211afd3cfa6328370c569ea0295dcf54_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_211afd3cfa6328370c569ea0295dcf54_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-08-08_211afd3cfa6328370c569ea0295dcf54_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
- Size 477KB
- Sample260808-ejt39szdjg
- SHA256 8050565f0f4b5ad023fd341681ada6961ebaa6ea8af5fee2b83158526384ee5b
- MD5 211afd3cfa6328370c569ea0295dcf54
- SHA1 a748f27b0a4aea210f0e61bc7dd219a8179a3e23
- SHA512 fce8b57fe8b9a50cd75731537b54d7b9505a27e00567445536ef8d9465959bc446f10967b6c229a6a3302be31cf7b8ac88718fa431ad71cc11a8d2887028f02c
- SSDEEP 12288:AYTNo2zXSQvg69CdjR/FbC3V7NXGeHN7562N/SkhMwIOhP:fm2zXl+djR/FbC31NXGet7ukemP
- TLSH T173A4AE21F995C432C42240711F28E7FB697DF9B44B6144DBB3D4AA392E6C2C17B3662E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_211afd3cfa6328370c569ea0295dcf54_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_211afd3cfa6328370c569ea0295dcf54_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_211afd3cfa6328370c569ea0295dcf54_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1580