c8000f21fc3aeb7fa9a636226669bb90f5b9b0a243acb22e0d9cb9b9a084c70b

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 08:24

Target
2026-09-13_f5611801a3746a26aa4f25993c125ba4_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
Size 11.2MB
Sample260913-kapp3shb85
SHA256 c8000f21fc3aeb7fa9a636226669bb90f5b9b0a243acb22e0d9cb9b9a084c70b
MD5 f5611801a3746a26aa4f25993c125ba4
SHA1 9674a1ef031d475d4381de383f2aadfa300f1b90
SHA512 4f3380f07c1ba25a95eb7b6b6b6afc056cc864b070c482617cf103b8b9b29deb691c81e73b9154c1b05fe7ae4d6da31fe24b29ea58c0ec17ed83a281269d52bd
SSDEEP 196608:shUJ+T8UdSidLy+Sr7XDmCPCeMJmdOB44vg:QBoUdSidL5Sr7XDmCPCYYBjg
TLSH
T1D5C66B22B245C032E55039F1B45EBAB963243D7B637088CFA1D5BE6921B95C21F76F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

Custom signature

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/4476-0-0x0000000000DB0000-0x00000000018E3000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4476-0-0x0000000000DB0000-0x00000000018E3000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2192	4476	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\2026-09-13_f5611801a3746a26aa4f25993c125ba4_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-13_f5611801a3746a26aa4f25993c125ba4_amadey_elex_glassworm_luca-stealer_lynx_njrat.exe"
1⤵
PID:4476
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4476 -s 252
  2⤵
  - Program crash
  PID:2192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 4476 -ip 4476
1⤵
PID:2532

memory/4476-0-0x0000000000DB0000-0x00000000018E3000-memory.dmp

Download