General
- Target 2026-03-09_9058e307b85fe51471759ee1915c8121_amadey_elex_luca-stealer_lynx_njrat_stealc
- Size 3.1MB
- Sample260309-dtaxpsbs4y
- SHA256 d6b24553ec8fd1c707343d7150e66b638834430ee4bb7d7c6679e3bcbbd579b4
- MD5 9058e307b85fe51471759ee1915c8121
- SHA1 6d02248468cf9140fafddf115b0905759ee9289f
- SHA512 f1ebaa01c62d356b070904a2be3103d8eb26effed1b2c90c184b001553edbef97729da5d6d3c6a177a74d91c2a787a4fe33b4980d23f15b30fa7b341cd77c124
- SSDEEP 24576:gl+ArtsJJV/ENOB2y3cK31LxVSGGd6yxdZhoZnvsm8Jaiw:g+JJV/ENO/vxgGGnbfoQ
- TLSH T1DBE51993B2930465E14BB330A54D11E58781EEA205E4BBAF69F2FE683FA41401FF3957
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-03-09_9058e307b85fe51471759ee1915c8121_amadey_elex_luca-stealer_lynx_njrat_stealc.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
default
C2
-
http://85.28.47.152
Attributes
-
url_path
/3c829f930578d648.php
Targets
-
- Target 2026-03-09_9058e307b85fe51471759ee1915c8121_amadey_elex_luca-stealer_lynx_njrat_stealc
- Size 3.1MB
- SHA256 d6b24553ec8fd1c707343d7150e66b638834430ee4bb7d7c6679e3bcbbd579b4
- MD5 9058e307b85fe51471759ee1915c8121
- SHA1 6d02248468cf9140fafddf115b0905759ee9289f
- SHA512 f1ebaa01c62d356b070904a2be3103d8eb26effed1b2c90c184b001553edbef97729da5d6d3c6a177a74d91c2a787a4fe33b4980d23f15b30fa7b341cd77c124
- SSDEEP 24576:gl+ArtsJJV/ENOB2y3cK31LxVSGGd6yxdZhoZnvsm8Jaiw:g+JJV/ENO/vxgGGnbfoQ
- TLSH T1DBE51993B2930465E14BB330A54D11E58781EEA205E4BBAF69F2FE683FA41401FF3957
- MD5 SHA1 SHA512 SSDEEP TLSH
Stealc family
Suspicious use of SetThreadContext