Analysis
- max time kernel
148s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/09/2026, 12:30
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-19_4d84eee231d5dcb5d952521600444f6d_amadey_coinminer_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_revil.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-19_4d84eee231d5dcb5d952521600444f6d_amadey_coinminer_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_revil.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-19_4d84eee231d5dcb5d952521600444f6d_amadey_coinminer_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_revil.exe
- Size 2.0MB
- Sample260919-pppe3sfd57
- SHA256 7e8bd4dde150be4d3aefaeac3d64229a84c729ebda70eb860af1a4e4a1ab7b20
- MD5 4d84eee231d5dcb5d952521600444f6d
- SHA1 2f61349ae02df13ab43c2f9143d58b4a14a36304
- SHA512 b52007c26edbb074e1a93e5808160ac8d00e820737a7f72218dd8cf05b4c4838dc1c09778f44f179169e9f734fcdd2feb4237e4b169d48c75ccf4aee53a036ae
- SSDEEP 49152:ClRdlRG34vGt3rM4Q8ZLMtP6sQ9WE8Hqq:ClRdlRGgGt3rM4issQU
- TLSH T190A5D012FBC280B3E9930574517AAB3F8D3AAD205724D5D7C7D03DAA9C312D16A3E396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-19_4d84eee231d5dcb5d952521600444f6d_amadey_coinminer_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_revil.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-19_4d84eee231d5dcb5d952521600444f6d_amadey_coinminer_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_revil.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-19_4d84eee231d5dcb5d952521600444f6d_amadey_coinminer_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_revil.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1328