Analysis
- max time kernel
149s - max time network
136s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/10/2026, 23:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_ebc8905f1348d25ade4b20bc9fac0497_amadey_elex_luca-stealer_lynx_njrat_spyloan.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_ebc8905f1348d25ade4b20bc9fac0497_amadey_elex_luca-stealer_lynx_njrat_spyloan.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-02_ebc8905f1348d25ade4b20bc9fac0497_amadey_elex_luca-stealer_lynx_njrat_spyloan.exe
- Size 11.3MB
- Sample261002-28dtxaaa46
- SHA256 e45c2c854d8dd12633e5e6c66a4ffc279cee3742dfa031cec8e06fabfd95b58a
- MD5 ebc8905f1348d25ade4b20bc9fac0497
- SHA1 75c31b4a789e188cb6bce5f1f93eb5e745453d4a
- SHA512 26e0ae1fa29a9db48d14bb853adbba72c853c756b65d487ecb6fa1104b6be623e43e685ae73e49cf87296a3fd39ea625f18e60f6cbbae11ce579553e2c4018b9
- SSDEEP 196608:0fyH2NjNCUOO9qC+JUkyeeVo2MnRjIyhTIqdKItvKM2jDRg/6bGtZMwSipsM2jsb:0fyHGZCUOOwqkyeuYpbh/dK4YgSbGbMU
- TLSH T14AC633E2BE85B0A3C57285347280AD3E067F7D241F1A4A67736ABED6BB300435D35A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-02_ebc8905f1348d25ade4b20bc9fac0497_amadey_elex_luca-stealer_lynx_njrat_spyloan.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-02_ebc8905f1348d25ade4b20bc9fac0497_amadey_elex_luca-stealer_lynx_njrat_spyloan.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-02_ebc8905f1348d25ade4b20bc9fac0497_amadey_elex_luca-stealer_lynx_njrat_spyloan.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1708