Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 06:17
Static task
static1
Behavioral task
behavioral1
Sample
2026-11-01_de5e3cb7905087d945208e1033fe7d27_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_de5e3cb7905087d945208e1033fe7d27_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-11-01_de5e3cb7905087d945208e1033fe7d27_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
- Size 428KB
- Sample261102-g134ls1vbx
- SHA256 9dcbf5fee9987d069406c854b51650df3c098a5ec8228c57cb5f1dd86d935047
- MD5 de5e3cb7905087d945208e1033fe7d27
- SHA1 38b5e2f719d1a52805f40bc005f2a30edc63afcf
- SHA512 e474b9a80c6e6b9d1ed8c1873583bce8aceac2df13e9ad293ee6c9a1615e96ac25f99baab769a0742ac3df2d5671e5ba701d2c4d30d4a8121f3d2e150640a43c
- SSDEEP 12288:D+PhpgSJhb3jGfVDjK1i0YQfHVQfKq5C0S4bfHVQfKq5C0S4rIK4:D+DX4VDOTfH0fHLK4
- TLSH T18A949E103AC1DC76E5520832A8F2CA76563EBC220B6165D7A7943B3FC930791BE7DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-01_de5e3cb7905087d945208e1033fe7d27_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-01_de5e3cb7905087d945208e1033fe7d27_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-01_de5e3cb7905087d945208e1033fe7d27_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4556