General
- Target 2026-06-26_1ff0e7c73c7545ebeddfef0ed0cab719_amadey_elex_luca-stealer_lynx_njrat
- Size 1.3MB
- Sample260629-v86flacw3l
- SHA256 8f96bd151722b45a626b3b100e37924da13543410be0a10980526c75789756cf
- MD5 1ff0e7c73c7545ebeddfef0ed0cab719
- SHA1 c96268f3ffe8738cdec5557938058724f84ed94e
- SHA512 a74f55ef74b4b0053add85e1d7c2c285ce37231013fce8eed5d8eaaeccc87776d7ded2dc652fe926c249d43f61edd2d866306e64fbd23c8c1f4b4cc13b9fbcbc
- SSDEEP 12288:5bjNbTverkxla0Bq5i5vDQL9rDZX+5xfuDYPRMfSgvEu8HkLC9rJA+QmkPxmw:/Xel0s5i5bQhAxfuDYZ9ku9rJimkPxn
- TLSH T10E55126230D5C0B5E937033061B4FA729969FD740BA1499B73CA699A8F711C2C938FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_1ff0e7c73c7545ebeddfef0ed0cab719_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_1ff0e7c73c7545ebeddfef0ed0cab719_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260629-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_1ff0e7c73c7545ebeddfef0ed0cab719_amadey_elex_luca-stealer_lynx_njrat
- Size 1.3MB
- SHA256 8f96bd151722b45a626b3b100e37924da13543410be0a10980526c75789756cf
- MD5 1ff0e7c73c7545ebeddfef0ed0cab719
- SHA1 c96268f3ffe8738cdec5557938058724f84ed94e
- SHA512 a74f55ef74b4b0053add85e1d7c2c285ce37231013fce8eed5d8eaaeccc87776d7ded2dc652fe926c249d43f61edd2d866306e64fbd23c8c1f4b4cc13b9fbcbc
- SSDEEP 12288:5bjNbTverkxla0Bq5i5vDQL9rDZX+5xfuDYPRMfSgvEu8HkLC9rJA+QmkPxmw:/Xel0s5i5bQhAxfuDYZ9ku9rJimkPxn
- TLSH T10E55126230D5C0B5E937033061B4FA729969FD740BA1499B73CA699A8F711C2C938FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
MITRE ATT&CK Enterprise v16
Defense Evasion
Access Token Manipulation
1Create Process with Token
1Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1