General
- Target 2025-08-03_e4f64e1fdccad59e7ac20bc2db3dc2ef_amadey_black-basta_cryptbot_elex_luca-stealer_lynx
- Size 1.9MB
- Sample250803-ejsv7sxsat
- SHA256 4cd0a2eb8662b5bdacf7f5db62827dd29a0c75d2b3b3f28eefb584e44a1ef2a5
- MD5 e4f64e1fdccad59e7ac20bc2db3dc2ef
- SHA1 28eea664c6f82dfd47754e83022bcee5484601ef
- SHA512 7a307b480e3dd222836b9975f95eca0d54fe43d32e63143146f72d8311003d61a7ca740d271ea6bf86de56aea30e577e29333269294675fab388b8ed6cc6753c
- SSDEEP 49152:dYRxABbj0DcLUeAexY9oJh+4NCXg5nQCtVETqWa7Hi9wrn:OQBbHLPCXg5n3tLC9in
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025-08-03_e4f64e1fdccad59e7ac20bc2db3dc2ef_amadey_black-basta_cryptbot_elex_luca-stealer_lynx.exe
Resource
win10v2004-20250502-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-08-03_e4f64e1fdccad59e7ac20bc2db3dc2ef_amadey_black-basta_cryptbot_elex_luca-stealer_lynx.exe
Resource
win11-20250619-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2025-08-03_e4f64e1fdccad59e7ac20bc2db3dc2ef_amadey_black-basta_cryptbot_elex_luca-stealer_lynx
- Size 1.9MB
- SHA256 4cd0a2eb8662b5bdacf7f5db62827dd29a0c75d2b3b3f28eefb584e44a1ef2a5
- MD5 e4f64e1fdccad59e7ac20bc2db3dc2ef
- SHA1 28eea664c6f82dfd47754e83022bcee5484601ef
- SHA512 7a307b480e3dd222836b9975f95eca0d54fe43d32e63143146f72d8311003d61a7ca740d271ea6bf86de56aea30e577e29333269294675fab388b8ed6cc6753c
- SSDEEP 49152:dYRxABbj0DcLUeAexY9oJh+4NCXg5nQCtVETqWa7Hi9wrn:OQBbHLPCXg5n3tLC9in
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL