Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/08/2026, 03:04
Behavioral task
behavioral1
Sample
2026-08-23_a2e25f2cca965951f0973aa554c21353_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_a2e25f2cca965951f0973aa554c21353_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-23_a2e25f2cca965951f0973aa554c21353_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
- Size 412KB
- Sample260824-dkqa2asdqc
- SHA256 e50f749662443c5c26bf964541418b86d3e5db17fcb1cbd876cbe095f7db06e4
- MD5 a2e25f2cca965951f0973aa554c21353
- SHA1 25bd03a29c392208860bae87a81e8d7964af3c03
- SHA512 877503b7a4b8de80c29c2a9f3ddc854e9e748f77e2785c99ad92ae9b5dd68d732ee4cefb65b395886c1457964e69df0e2e7def6cf085d7a20ef1ca5d38b9bf78
- SSDEEP 12288:vj98dKI8Y2AISopmjr4nhigahEA5hN0QlGfrIorTpIsX0:bYouGDdrLE
- TLSH T16F945B217817D032D66191711F79FFF285ADAC269B7149DB77C00E36AE202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-23_a2e25f2cca965951f0973aa554c21353_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-23_a2e25f2cca965951f0973aa554c21353_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-23_a2e25f2cca965951f0973aa554c21353_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4244