2026-05-05_59cd53c2845f51108b8cebd79a2d3feb_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-05_59cd53c2845f51108b8cebd79a2d3feb_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
Size 2.0MB
Sample260505-mxpppsc18t
SHA256 faf8093615cab1d7bda284c299fac86956b77b6da3ccdef70380b25457a6a6d4
MD5 59cd53c2845f51108b8cebd79a2d3feb
SHA1 154a3a919c7e41c7d80730ac24c543e98944f1b9
SHA512 e96653aa3bbaf119b068bdc54a2ba1d7dadb66653b108c134d72889da783a414684be36d49dc2a8a14328403cc9544d2b1bbff385d9fd6ffb2a831347552bfe8
SSDEEP 24576:OgH7TqP5fMW2eHYwKpQ6Yz7KEMdX6keYnAcerV:1TWlMOHYw+Q6YPKEnSG
TLSH
T18F95F12579A5C072C07701314D6AD794963EF9B00F2245DBB7C8AFBE2F345C1AB24AA7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-05_59cd53c2845f51108b8cebd79a2d3feb_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-05-05_59cd53c2845f51108b8cebd79a2d3feb_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 2.0MB

2026-05-05_59cd53c2845f51108b8cebd79a2d3feb_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 0d7dd2abe90013cab9ab51d09ed35612
SHA256 faf8093615cab1d7bda284c299fac86956b77b6da3ccdef70380b25457a6a6d4
MD5 59cd53c2845f51108b8cebd79a2d3feb
SHA1 154a3a919c7e41c7d80730ac24c543e98944f1b9
SHA512 e96653aa3bbaf119b068bdc54a2ba1d7dadb66653b108c134d72889da783a414684be36d49dc2a8a14328403cc9544d2b1bbff385d9fd6ffb2a831347552bfe8
SSDEEP 24576:OgH7TqP5fMW2eHYwKpQ6Yz7KEMdX6keYnAcerV:1TWlMOHYw+Q6YPKEnSG
TLSH
T18F95F12579A5C072C07701314D6AD794963EF9B00F2245DBB7C8AFBE2F345C1AB24AA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

168727

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

StringFromGUID2 IIDFromString

shell32

SHGetFolderPathA SHGetFolderPathW

user32

GetMessageA GetMessageW DispatchMessageA DispatchMessageW PeekMessageA MsgWaitForMultipleObjectsEx IsWindowUnicode TranslateMessage

kernel32

GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetDllDirectoryA FileTimeToSystemTime LocalFree MultiByteToWideChar WideCharToMultiByte WaitForSingleObject LoadLibraryExW OpenMutexA DeleteFileA FindClose GetFileAttributesA RemoveDirectoryA SetFileAttributesA CloseHandle SetLastError GetCommandLineW GetTempPathA GetCurrentProcess GetSystemDirectoryA GetNativeSystemInfo GetModuleFileNameA GetModuleHandleExW Sleep GetCurrentProcessId GetCurrentThreadId GetLocalTime FormatMessageW ReadFile SetHandleInformation CreatePipe PeekNamedPipe TerminateProcess GetExitCodeProcess DecodePointer GetModuleHandleExA LoadResource LockResource SizeofResource FindResourceA FreeLibrary GetProcAddress LoadLibraryW QueryPerformanceCounter CreateFileW SetFilePointerEx InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetStringTypeW InitializeCriticalSectionEx EncodePointer LCMapStringEx GetCPInfo IsDebuggerPresent OutputDebugStringW RaiseException SetUnhandledExceptionFilter CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID UnhandledExceptionFilter EnumSystemLocalesW FlushFileBuffers GetFileSizeEx ReadConsoleW GetCurrentDirectoryW HeapReAlloc GetTimeZoneInformation HeapSize FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap RtlUnwind TlsAlloc HeapFree HeapAlloc IsProcessorFeaturePresent GetStartupInfoW GetModuleHandleW GetSystemTimeAsFileTime CreateProcessA GetCommandLineA ExitProcess SetStdHandle CreateDirectoryW GetFullPathNameW WriteConsoleW GetModuleFileNameW GetStdHandle GetConsoleMode GetConsoleOutputCP WriteFile SetEndOfFile SystemTimeToTzSpecificLocalTime GetFileType GetFileInformationByHandle GetDriveTypeW TlsFree TlsSetValue TlsGetValue InitializeSListHead

advapi32

RegCreateKeyExA ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegQueryValueExA RegOpenKeyExA

oleaut32

SysFreeString GetErrorInfo

msi

ord168 ord137 ord141 ord8 ord117 ord159 ord160 ord91 ord115 ord67 ord31 ord189 ord44 ord204

version

VerQueryValueW GetFileVersionInfoA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-05_59cd53c2845f51108b8cebd79a2d3feb_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

ole32

shell32

user32

kernel32

advapi32

oleaut32

msi

version

generic