General
- Target 2026-05-28_dad7e51c533812ca31abda4cfb6d8aa8_amadey_elex_luca-stealer_lynx_njrat_play
- Size 1.7MB
- Sample260528-sehfkadv41
- SHA256 cf5fa3962ebdbd793db5e8fda28d72a636fc3e5ca880263162c1d49f531345d6
- MD5 dad7e51c533812ca31abda4cfb6d8aa8
- SHA1 7ede423710c09ea649c79735ea41d2dbd91a7747
- SHA512 d7f93343ce17b93093fa0d73a18adb79bbf8be95a73c23528ad0b670e43f57415992afaa6e3b6ae28361e263b2f4ab07b363eeebfdf0aa1a32a99a6c57c7627b
- SSDEEP 24576:t4l9rSNSEzO8IWx/5I1AWwa2p7UmcvNWPEVrsowLEjHGKd//:SSSEzVIO/5I1AWwa2aN4ERAEjHrd//
- TLSH T12C850202B5908032F9B315374DB8AA316EBEBC704961DEAF53D85A3EDF315C0D629663
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_dad7e51c533812ca31abda4cfb6d8aa8_amadey_elex_luca-stealer_lynx_njrat_play.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_dad7e51c533812ca31abda4cfb6d8aa8_amadey_elex_luca-stealer_lynx_njrat_play.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_dad7e51c533812ca31abda4cfb6d8aa8_amadey_elex_luca-stealer_lynx_njrat_play
- Size 1.7MB
- SHA256 cf5fa3962ebdbd793db5e8fda28d72a636fc3e5ca880263162c1d49f531345d6
- MD5 dad7e51c533812ca31abda4cfb6d8aa8
- SHA1 7ede423710c09ea649c79735ea41d2dbd91a7747
- SHA512 d7f93343ce17b93093fa0d73a18adb79bbf8be95a73c23528ad0b670e43f57415992afaa6e3b6ae28361e263b2f4ab07b363eeebfdf0aa1a32a99a6c57c7627b
- SSDEEP 24576:t4l9rSNSEzO8IWx/5I1AWwa2p7UmcvNWPEVrsowLEjHGKd//:SSSEzVIO/5I1AWwa2aN4ERAEjHrd//
- TLSH T12C850202B5908032F9B315374DB8AA316EBEBC704961DEAF53D85A3EDF315C0D629663
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1