2026-05-04_148885b3c1bd7a509d79e06818e7f1e9_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-04_148885b3c1bd7a509d79e06818e7f1e9_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
Size 2.0MB
Sample260504-n7c94aav21
SHA256 365022d7a8347e40f7caf859180d164c936644c83536926560b2be8f8be02948
MD5 148885b3c1bd7a509d79e06818e7f1e9
SHA1 7877ba163d6865ed9b68593e77516c8ee4c312a4
SHA512 87a5018571d8b12bf792a430b193b54c80cb3e4198b7f357ab76309c12cbe94df11641cc7e195a344489ffe24bb6388a13d1a137fb6aad8c06833ebc736fb5be
SSDEEP 24576:ZgH7TqP5fMW2eHYwKpQdBYz7KEMdX6keYnAcer+:qTWlMOHYw+QdBYPKEnSG
TLSH
T14095F12579A5C072C07701314D6AD794963EF9B00F2245DBB7C8AFBE2F345C1AB24AA7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-04_148885b3c1bd7a509d79e06818e7f1e9_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-05-04_148885b3c1bd7a509d79e06818e7f1e9_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 2.0MB

2026-05-04_148885b3c1bd7a509d79e06818e7f1e9_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 0d7dd2abe90013cab9ab51d09ed35612
SHA256 365022d7a8347e40f7caf859180d164c936644c83536926560b2be8f8be02948
MD5 148885b3c1bd7a509d79e06818e7f1e9
SHA1 7877ba163d6865ed9b68593e77516c8ee4c312a4
SHA512 87a5018571d8b12bf792a430b193b54c80cb3e4198b7f357ab76309c12cbe94df11641cc7e195a344489ffe24bb6388a13d1a137fb6aad8c06833ebc736fb5be
SSDEEP 24576:ZgH7TqP5fMW2eHYwKpQdBYz7KEMdX6keYnAcer+:qTWlMOHYw+QdBYPKEnSG
TLSH
T14095F12579A5C072C07701314D6AD794963EF9B00F2245DBB7C8AFBE2F345C1AB24AA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

168727

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

StringFromGUID2 IIDFromString

shell32

SHGetFolderPathA SHGetFolderPathW

user32

GetMessageA GetMessageW DispatchMessageA DispatchMessageW PeekMessageA MsgWaitForMultipleObjectsEx IsWindowUnicode TranslateMessage

kernel32

GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetDllDirectoryA FileTimeToSystemTime LocalFree MultiByteToWideChar WideCharToMultiByte WaitForSingleObject LoadLibraryExW OpenMutexA DeleteFileA FindClose GetFileAttributesA RemoveDirectoryA SetFileAttributesA CloseHandle SetLastError GetCommandLineW GetTempPathA GetCurrentProcess GetSystemDirectoryA GetNativeSystemInfo GetModuleFileNameA GetModuleHandleExW Sleep GetCurrentProcessId GetCurrentThreadId GetLocalTime FormatMessageW ReadFile SetHandleInformation CreatePipe PeekNamedPipe TerminateProcess GetExitCodeProcess DecodePointer GetModuleHandleExA LoadResource LockResource SizeofResource FindResourceA FreeLibrary GetProcAddress LoadLibraryW QueryPerformanceCounter CreateFileW SetFilePointerEx InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetStringTypeW InitializeCriticalSectionEx EncodePointer LCMapStringEx GetCPInfo IsDebuggerPresent OutputDebugStringW RaiseException SetUnhandledExceptionFilter CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID UnhandledExceptionFilter EnumSystemLocalesW FlushFileBuffers GetFileSizeEx ReadConsoleW GetCurrentDirectoryW HeapReAlloc GetTimeZoneInformation HeapSize FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap RtlUnwind TlsAlloc HeapFree HeapAlloc IsProcessorFeaturePresent GetStartupInfoW GetModuleHandleW GetSystemTimeAsFileTime CreateProcessA GetCommandLineA ExitProcess SetStdHandle CreateDirectoryW GetFullPathNameW WriteConsoleW GetModuleFileNameW GetStdHandle GetConsoleMode GetConsoleOutputCP WriteFile SetEndOfFile SystemTimeToTzSpecificLocalTime GetFileType GetFileInformationByHandle GetDriveTypeW TlsFree TlsSetValue TlsGetValue InitializeSListHead

advapi32

RegCreateKeyExA ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegQueryValueExA RegOpenKeyExA

oleaut32

SysFreeString GetErrorInfo

msi

ord168 ord137 ord141 ord8 ord117 ord159 ord160 ord91 ord115 ord67 ord31 ord189 ord44 ord204

version

VerQueryValueW GetFileVersionInfoA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-04_148885b3c1bd7a509d79e06818e7f1e9_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

ole32

shell32

user32

kernel32

advapi32

oleaut32

msi

version

generic