Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/10/2026, 10:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_8f4cd9f3da2919bb52e247e6a0ac30b5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_8f4cd9f3da2919bb52e247e6a0ac30b5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-30_8f4cd9f3da2919bb52e247e6a0ac30b5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
- Size 2.4MB
- Sample261001-mdltpswejf
- SHA256 86531fd91cd912f232e400c6192393544c0ad439d18096a38905ff142fb0b715
- MD5 8f4cd9f3da2919bb52e247e6a0ac30b5
- SHA1 8fe85245fb17269db9d356c03dc282f504293375
- SHA512 6e9ab717de4819c61259b4c46d55ed6fe1cded14d84a9109af82bad73a9c83d8fee4dace271d9963981ed4fb647881d1b1b0a6cd8c7bd96521164843dc142233
- SSDEEP 24576:h+KpPXsPZIzkQ+W3BfXUQFpKJkpDDk1Jco/v2Y8i4FBwZ/fCWJTHJKUGlqktPsot:xfBSwB8uk15Pp81DtPsohyYRREj4
- TLSH T108C5CF21B7818071F9A702F5657E973F483AFD3117248AD3E7D02E7A58316C1AB3A399
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-30_8f4cd9f3da2919bb52e247e6a0ac30b5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-30_8f4cd9f3da2919bb52e247e6a0ac30b5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-30_8f4cd9f3da2919bb52e247e6a0ac30b5_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4152