Analysis
- max time kernel
150s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/09/2026, 21:35
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-28_f7a984a937596c7e0a57180ed94387a5_akira_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-28_f7a984a937596c7e0a57180ed94387a5_akira_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-28_f7a984a937596c7e0a57180ed94387a5_akira_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
- Size 969KB
- Sample260928-1ffx5athpd
- SHA256 87ce8478eaf7a4358319de5c4dcaac4744c2c404dca04de4b01c78bf99ea6083
- MD5 f7a984a937596c7e0a57180ed94387a5
- SHA1 dee4f1da88cfd1afbdfdeecde2209b43de8c2de7
- SHA512 d7b0190a02405b9188376d11e608aef969a986f3bae30577dda1af1a140f2cb4bafc7df7631099071afdb8527ef5fd641dd36f2e6632432c719d1dddd980ddca
- SSDEEP 24576:BMxd9+B1cmE7uMPX1rsLxSMXOM9vQCIUspm74Y6X8:u8a7QCCIUso7eX8
- TLSH T17F257BE175428072DA9103714A7C7F7E657C9DF40B65C9CB6FC43A2DCA330D26A3AA4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-28_f7a984a937596c7e0a57180ed94387a5_akira_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-28_f7a984a937596c7e0a57180ed94387a5_akira_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-28_f7a984a937596c7e0a57180ed94387a5_akira_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2032