Analysis
- max time kernel
150s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/10/2026, 16:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe
- Size 337KB
- Sample261011-tltb3sch69
- SHA256 77fd1c5b4aa0fb89dc83168016c042a16f605ccef1bda0247461825a7fc0423b
- MD5 4073f2c5e08d07dff3124b3e8f70208e
- SHA1 9f91f8374c90324c3e04fd2ae6606d5456878629
- SHA512 e27edcb235409c3aa8e0d1a6cf25b4ddb2cb9985e1dc4d264bae4e437afc1a0c02486405919ef3fd498667ddb20091c25c1b7f6d1933c7a427643ea0be22eaae
- SSDEEP 6144:+/7UMZownLL8vjCHducFnDq8zOgyVrB7qTSxg3pHTJ8cEmZ7o:36znefcFnD5IOSxUpzRZ7o
- TLSH T168745A12B6808871C47212BA05E4EBB5573EAD604BB589CB67E47F3FFB702C25E31916
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5792