Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/09/2026, 12:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_be10aa4f2a532dad8aefbee1aeee88a1_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_be10aa4f2a532dad8aefbee1aeee88a1_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-09-09_be10aa4f2a532dad8aefbee1aeee88a1_amadey_elex_luca-stealer_lynx_njrat.exe
- Size 7.4MB
- Sample260909-pzryyseq3s
- SHA256 8a826c7844cb7aa1e601e51e00c34fc1bcc8c81bf8102fa6fbbe8be4b5747a4d
- MD5 be10aa4f2a532dad8aefbee1aeee88a1
- SHA1 0799309d1d34b36c58781609e04e895723586570
- SHA512 d058b511b4c6620af78f90ee817dc72b16fcb751eae0f31da491cf4b31c56b6ffcceb8436967a9950c29e1cd7ae6378b9a9d89bd2741a91788d50a8ec3a27b1b
- SSDEEP 98304:reUWP8ywjAM9/3KpOyWYjd9OUtQn+G+YyVHNA86QiWXKjY87k20EiTtH41p9H81f:r8yf9MqeKMF6ic9SSqwght4UKP5G
- TLSH T18476F1C13790F822D35A01704D25B7F8861A66303724E6E7BF8F36D65E685C5EEB0A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-09_be10aa4f2a532dad8aefbee1aeee88a1_amadey_elex_luca-stealer_lynx_njrat.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 840 2026-09-09_be10aa4f2a532dad8aefbee1aeee88a1_amadey_elex_luca-stealer_lynx_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-09_be10aa4f2a532dad8aefbee1aeee88a1_amadey_elex_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-09_be10aa4f2a532dad8aefbee1aeee88a1_amadey_elex_luca-stealer_lynx_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
PID:840