Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/10/2026, 16:49
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-11_89366ec57b2c609236ac37e308633dce_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_play.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_89366ec57b2c609236ac37e308633dce_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_play.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-11_89366ec57b2c609236ac37e308633dce_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_play.exe
- Size 195KB
- Sample261012-vb15lsgy3r
- SHA256 88c422ff1541db4d1b29359e0bb0fe071ec5974017f36ee3d3091c57d6f5fc22
- MD5 89366ec57b2c609236ac37e308633dce
- SHA1 2de00d0a717baa2a0e605f668e310bd7ea2ce907
- SHA512 4103bd68e3cd485b2300c49d73b6d6f7bd8a44ac5ea687cd9e86162ff8ffbd74ab1cc00092c64ea8735be83b77f5915c314cc7c57d0254fa8a0659a8ee0b85c7
- SSDEEP 6144:x/Xt4nqREgRKE2kKh+0nc0y3FzweIITx+1c:1Xt4nqREgRKE2kKhj8FzhImx+1c
- TLSH T11A148D12B1E08072E97315321AF0AA705EBDFD704E62DA9F27940F6E5F716C0D626B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-11_89366ec57b2c609236ac37e308633dce_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_play.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-11_89366ec57b2c609236ac37e308633dce_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_play.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-11_89366ec57b2c609236ac37e308633dce_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_play.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3656