Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/09/2026, 21:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_51996d98c5b3d905315c02d5512775de_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_51996d98c5b3d905315c02d5512775de_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-16_51996d98c5b3d905315c02d5512775de_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
- Size 4.2MB
- Sample260916-1hpcaazz5r
- SHA256 90667d191918f98734b59a4a72568d608d522b17cbb34cf47f0d4e2d3b0db381
- MD5 51996d98c5b3d905315c02d5512775de
- SHA1 53ca29430255e52858899857e5c18a7de3459bc9
- SHA512 8a6ba10260e7264e1951c11d74e7e436219e6d24c6f36db0e41068561dd9e37da11fa1da7ddad51db2ce75a829a03954ae0b34b458d1df4a7283b988d7858aea
- SSDEEP 49152:Im4PRZ0sPUyWzt5YxFUAfuLePAEvvQxruk660JVB4jDmg27RnWGj:wRFUfzt5YxFU1LePDvolkCD527BWG
- TLSH T152169EA0364AC132D55651795DBEBFBEC86DA96A0F7190C7A2C58D2E38201C32F35F1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-16_51996d98c5b3d905315c02d5512775de_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-16_51996d98c5b3d905315c02d5512775de_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-16_51996d98c5b3d905315c02d5512775de_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4304