Analysis
- max time kernel
150s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 23:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat.exe
- Size 1.8MB
- Sample260810-3gtaysbb87
- SHA256 aef8640039e8c7f5aac6ed8de9d4e8931ad4e6b50ee1777f3ef7966c03b380c6
- MD5 cf9edbf2cde7d04d92e84e516845b76d
- SHA1 e01c7520a8c7aa3aedd1742e2e4f7b6f7dc48dae
- SHA512 2d9607ca9d0c31d866ddc4e0665bfa2da2ab1573eafb0fefa7fbc5a2de50549a892abaf9c299d6ea14ce6f487e1ed761872469fbdf6811c13aa48af5268779b9
- SSDEEP 24576:ewOddISY9A9Pu8hwg8zQPI9hAH8CzQgAqvuG:uddISY69PuQ8zQPm6YgA0uG
- TLSH T17C95E0E2B591C072C56603310D75FEBD1ABD6CF00A62C6AB2FD87A5EDF375809A31612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 884 2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat.exe 884 2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:884