Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/08/2026, 03:07
Behavioral task
behavioral1
Sample
2026-08-26_f164106fb827158b5890d2ed9b7bbe27_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_f164106fb827158b5890d2ed9b7bbe27_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-26_f164106fb827158b5890d2ed9b7bbe27_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
- Size 11.2MB
- Sample260827-dmg3fagb52
- SHA256 cb5d8a9c755e4acc1846a5273c2fdd932d1e223dc58274b9a5327f5db3683ee9
- MD5 f164106fb827158b5890d2ed9b7bbe27
- SHA1 a36254e119786b68da4a87da02c0e51e8340c487
- SHA512 9b4662d7834a8b85ab9f388a31d6ff3784184bda1015294a2f8ee9a79521e0596987ec0e8cc05f058d49621c341ec18fc9243f0bc8c97c8b015b72ad59eb052f
- SSDEEP 196608:lsRnE4OKUliye6SSaETxGCLCv7MMs7PHddOZE3:GCNKUliyeNSaETxGCLCfcPzZ
- TLSH T13FC67C22B345C032F55011B3945AEABA63643D3A5BB184D7B3D1BE6A21F5AC30B35F1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule behavioral2/memory/4364-0-0x0000000000C50000-0x0000000001783000-memory.dmp UPX -
resource yara_rule behavioral2/memory/4364-0-0x0000000000C50000-0x0000000001783000-memory.dmp upx - Program crash 1 IoCs
pid pid_target Process procid_target 2704 4364 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-26_f164106fb827158b5890d2ed9b7bbe27_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-26_f164106fb827158b5890d2ed9b7bbe27_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"1⤵PID:4364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4364 -s 2522⤵
- Program crash
PID:2704
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4364 -ip 43641⤵PID:4904