2026-03-07_2342aaad6db3080f2cdf541f39d98de0_amadey_elex_luca-stealer_lynx_njrat_stealc

General

Target
2026-03-07_2342aaad6db3080f2cdf541f39d98de0_amadey_elex_luca-stealer_lynx_njrat_stealc
Size 15.8MB
Sample260307-dntsmacs4x
SHA256 f9241855121b9608729ba7eb48e2465834f0164c6213a9371dbced969f7b318b
MD5 2342aaad6db3080f2cdf541f39d98de0
SHA1 9d1a2a6818be16f7d60961398737ff2bc163efb8
SHA512 0765681b2ee3cd8a45623b27ed5b77036e405f08ee9d009f337834bd9af05abb46b2a17b91ecdcb8106c0f90ffe3f9105e07fddc8e988d8a2b3fc62d450fb8fe
SSDEEP 98304:ybFXaexwoV2rqKxaWkidqVtIhjAgWlZHrtjFsN3RwC+cDhfXXWB:gwexwoVLhidqVtg8jZHrw3wC+8
TLSH
T1C5F63983A2930455E14AB370B54D01D59781EEA205E4BBBFA8F2FE683FA41441FF3A57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-03-07_2342aaad6db3080f2cdf541f39d98de0_amadey_elex_luca-stealer_lynx_njrat_stealc

File Explorer

2026-03-07_2342aaad6db3080f2cdf541f39d98de0_amadey_elex_luca-stealer_lynx_njrat_stealc

.exe 15.8MB

2026-03-07_2342aaad6db3080f2cdf541f39d98de0_amadey_elex_luca-stealer_lynx_njrat_stealc

IMPHASH af0f88358390a4f58963b26bacea4505
SHA256 f9241855121b9608729ba7eb48e2465834f0164c6213a9371dbced969f7b318b
MD5 2342aaad6db3080f2cdf541f39d98de0
SHA1 9d1a2a6818be16f7d60961398737ff2bc163efb8
SHA512 0765681b2ee3cd8a45623b27ed5b77036e405f08ee9d009f337834bd9af05abb46b2a17b91ecdcb8106c0f90ffe3f9105e07fddc8e988d8a2b3fc62d450fb8fe
SSDEEP 98304:ybFXaexwoV2rqKxaWkidqVtIhjAgWlZHrtjFsN3RwC+cDhfXXWB:gwexwoVLhidqVtg8jZHrw3wC+8
TLSH
T1C5F63983A2930455E14AB370B54D01D59781EEA205E4BBBFA8F2FE683FA41441FF3A57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

188858

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\9h4bqyhzw0\output.pdb

user32

OffsetRect

kernel32

GetCPInfo CreateFileW WaitForSingleObject GetModuleHandleA SwitchToFiber CreateThread GetProcAddress VirtualAllocEx RaiseException RtlCaptureStackBackTrace GetCurrentThreadId IsProcessorFeaturePresent GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW InitOnceComplete InitOnceBeginInitialize FormatMessageA ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive CloseHandle WaitForSingleObjectEx Sleep SwitchToThread GetExitCodeThread GetNativeSystemInfo QueryPerformanceCounter QueryPerformanceFrequency EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LocalFree GetLocaleInfoEx MultiByteToWideChar WideCharToMultiByte LCMapStringEx SetFileInformationByHandle GetTempPathW InitOnceExecuteOnce CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetSystemTimeAsFileTime GetTickCount64 CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetModuleHandleW GetFileInformationByHandleEx CreateSymbolicLinkW GetStringTypeW CompareStringEx WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead HeapSize RtlUnwind InterlockedPushEntrySList InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread ResumeThread FreeLibraryAndExitThread ExitProcess GetModuleFileNameW GetStdHandle WriteFile SetConsoleCtrlHandler HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetCurrentThread FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap OutputDebugStringW SetStdHandle

Sharing

General

Malware Config

Signatures

File Explorer

2026-03-07_2342aaad6db3080f2cdf541f39d98de0_amadey_elex_luca-stealer_lynx_njrat_stealc

user32

kernel32

generic