2026-04-24_cbe9d18d64aae1601cfdaf75f7e15c3c_elex_luca-stealer_lynx_manuscrypt_njrat

General

Target
2026-04-24_cbe9d18d64aae1601cfdaf75f7e15c3c_elex_luca-stealer_lynx_manuscrypt_njrat
Size 269KB
Sample260424-gdfd2abv6r
SHA256 4e04d2bba573e1701f02b97b78e879d557816443ef198a7987502d06094b0044
MD5 cbe9d18d64aae1601cfdaf75f7e15c3c
SHA1 60fa78fca6fb637f1d4d27a23a87c931544b2bc0
SHA512 47520892b0a5b9b854e1db53c9b6ea6ef00c5b354e3a6c85b35d79911e3cfd54cba28d6f4c7809f01a02ef9a09f766c7ecacb2a831841b8f0d5ed9f9caa6d150
SSDEEP 6144:lgccSHUQc0s8NcDDP7kJrYQ692X0sAL/oCL9sEV:yE486nP7shX0ZECuQ
TLSH
T16F448C0174D1C872E57629325824DAB15E3EFD700F209EEB73D8163E1E706D19A36EAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-24_cbe9d18d64aae1601cfdaf75f7e15c3c_elex_luca-stealer_lynx_manuscrypt_njrat

File Explorer

2026-04-24_cbe9d18d64aae1601cfdaf75f7e15c3c_elex_luca-stealer_lynx_manuscrypt_njrat

.exe 269KB

2026-04-24_cbe9d18d64aae1601cfdaf75f7e15c3c_elex_luca-stealer_lynx_manuscrypt_njrat

IMPHASH be203ae3a61bac5d0dc887d018b729a1
SHA256 4e04d2bba573e1701f02b97b78e879d557816443ef198a7987502d06094b0044
MD5 cbe9d18d64aae1601cfdaf75f7e15c3c
SHA1 60fa78fca6fb637f1d4d27a23a87c931544b2bc0
SHA512 47520892b0a5b9b854e1db53c9b6ea6ef00c5b354e3a6c85b35d79911e3cfd54cba28d6f4c7809f01a02ef9a09f766c7ecacb2a831841b8f0d5ed9f9caa6d150
SSDEEP 6144:lgccSHUQc0s8NcDDP7kJrYQ692X0sAL/oCL9sEV:yE486nP7shX0ZECuQ
TLSH
T16F448C0174D1C872E57629325824DAB15E3EFD700F209EEB73D8163E1E706D19A36EAB
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11324

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle GetTempPathA CreateProcessA FreeResource FindResourceA LoadResource LockResource SizeofResource UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EncodePointer RaiseException GetLastError SetLastError RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ReadFile ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc SetFilePointerEx GetConsoleMode ReadConsoleW GetFileType FlushFileBuffers GetConsoleCP GetFileSizeEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetProcessHeap SetStdHandle GetStringTypeW CreateFileW HeapSize HeapReAlloc SetEndOfFile WriteConsoleW DecodePointer

advapi32

RegDeleteKeyA RegOpenKeyExA RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-24_cbe9d18d64aae1601cfdaf75f7e15c3c_elex_luca-stealer_lynx_manuscrypt_njrat

kernel32

advapi32

generic