4309619f9fec9e53a8328535c32e40a7cc2de2657a424f33ca626d0be1f2fdc6

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 09:40

Target
2026-08-14_c41664ad17621a9cc83addae1a250cca_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Size 10.7MB
Sample260814-lm6psshj4x
SHA256 4309619f9fec9e53a8328535c32e40a7cc2de2657a424f33ca626d0be1f2fdc6
MD5 c41664ad17621a9cc83addae1a250cca
SHA1 89dc5647d3e03ab05dbb13bf3131c0599c44cfaf
SHA512 768bcc4db7f84c67a638a52512207f5168f4d4bd576145bf85aca910d586e9cffa846a1f8e16a3abb5ec38c83076bcbbbed7fb29f15066d363ab13b443d8bf1d
SSDEEP 196608:5ch0dZHEAuK8tiKW6ySCcjxGC7C3TEkUT/3Vqpp:X6lK8tiKWNSCcjxGC7C/8/wpp
TLSH
T1EDB69C22B355C032F55121B1582FAB1A62207D392370C8DBF6E2AE6E12F56C75B35F1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/3316-0-0x0000000000120000-0x0000000000BD1000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3316-0-0x0000000000120000-0x0000000000BD1000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4912	3316	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\2026-08-14_c41664ad17621a9cc83addae1a250cca_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-14_c41664ad17621a9cc83addae1a250cca_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"
1⤵
PID:3316
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3316 -s 252
  2⤵
  - Program crash
  PID:4912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3316 -ip 3316
1⤵
PID:1844

memory/3316-0-0x0000000000120000-0x0000000000BD1000-memory.dmp

Download