ce783d943609d7f67518ed0b4a3736824ef8cfefb2d94bcf65efce9e34fd272b

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 04:48

Target
2026-08-09_e3e9014e349757c9a2fde4cb1548b427_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Size 11.2MB
Sample260809-ffd4batycv
SHA256 ce783d943609d7f67518ed0b4a3736824ef8cfefb2d94bcf65efce9e34fd272b
MD5 e3e9014e349757c9a2fde4cb1548b427
SHA1 ac0d8925abcb33648009a3dce1ebec94334973fd
SHA512 bf5d2766cf543497a3a8caf6226d3f02e3101bbf9b932e059e7999586261a53cbf3c36ff293bc13bbb24e14b247d223565a9dda175fc413f5c2a410a0be30f15
SSDEEP 196608:xbtGHfe+AzbxYiro+xSFGQb+CvCdDNHtiCj0c66b:c5EbxYiro6SFGQb+CvCXEC560
TLSH
T160C65B22B345C032F55011B3946AEABA63243D76577088CBF7D1BE6A25F59C24B36F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral1/memory/1384-0-0x0000000000030000-0x0000000000B63000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1384-0-0x0000000000030000-0x0000000000B63000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
60	1384	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\2026-08-09_e3e9014e349757c9a2fde4cb1548b427_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-09_e3e9014e349757c9a2fde4cb1548b427_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"
1⤵
PID:1384
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1384 -s 196
  2⤵
  - Program crash
  PID:60

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1384 -ip 1384
1⤵
PID:3864

memory/1384-0-0x0000000000030000-0x0000000000B63000-memory.dmp

Download