2026-07-04_eaa3712966dca5b1f23973682ff59d11_amadey_elex_luca-stealer_lynx_njrat

General

Target
2026-07-04_eaa3712966dca5b1f23973682ff59d11_amadey_elex_luca-stealer_lynx_njrat
Size 617KB
Sample260704-bqnchset4l
SHA256 78ccc39e391c97ae59d5e5a0a722b3b0e9802333afaa0a5442a999897082fc1c
MD5 eaa3712966dca5b1f23973682ff59d11
SHA1 8480be1273876cc152d98a5b9339de43adf70429
SHA512 58046e05a8da46f3a5bef985231e79295216594f8a72f9b6aec26899f5de5e8f5e3fd8762724b8d3dfdf5a8c9c2de27f1501186f57d304c947f6c38116104ec5
SSDEEP 12288:kDB3TvPi8+HK5H/1T9hK7j/JoPxKzahMExwsADg/42EJ6A:kD4aH/5eXJ4vLp74HJ6
TLSH
T12BD49DD07582907DD07205F13568AA63556E7E300B6059DFE3943E2A3A332C19AFDFEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-04_eaa3712966dca5b1f23973682ff59d11_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-07-04_eaa3712966dca5b1f23973682ff59d11_amadey_elex_luca-stealer_lynx_njrat

.exe 617KB

2026-07-04_eaa3712966dca5b1f23973682ff59d11_amadey_elex_luca-stealer_lynx_njrat

IMPHASH c4e7a6e5a5210adbef89e786fda24bbf
SHA256 78ccc39e391c97ae59d5e5a0a722b3b0e9802333afaa0a5442a999897082fc1c
MD5 eaa3712966dca5b1f23973682ff59d11
SHA1 8480be1273876cc152d98a5b9339de43adf70429
SHA512 58046e05a8da46f3a5bef985231e79295216594f8a72f9b6aec26899f5de5e8f5e3fd8762724b8d3dfdf5a8c9c2de27f1501186f57d304c947f6c38116104ec5
SSDEEP 12288:kDB3TvPi8+HK5H/1T9hK7j/JoPxKzahMExwsADg/42EJ6A:kD4aH/5eXJ4vLp74HJ6
TLSH
T12BD49DD07582907DD07205F13568AA63556E7E300B6059DFE3943E2A3A332C19AFDFEA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

65614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Installer.pdb

kernel32

GetCurrentThreadId Sleep CloseHandle GetCurrentProcessId WaitForSingleObject GetModuleHandleW CreateProcessA GetTickCount WriteConsoleW HeapSize CreateFileW GetEnvironmentVariableW CreateProcessW CreateDirectoryW SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW MultiByteToWideChar GetLastError WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EncodePointer DecodePointer LCMapStringW GetLocaleInfoW GetCPInfo IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter InitializeSListHead GetCurrentProcess TerminateProcess RtlUnwind RaiseException FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetFileSizeEx SetFilePointerEx GetFileType HeapAlloc FlushFileBuffers GetConsoleCP GetConsoleMode HeapFree IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW SetEndOfFile

user32

GetCursorPos

advapi32

GetUserNameW RegSetKeyValueW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-04_eaa3712966dca5b1f23973682ff59d11_amadey_elex_luca-stealer_lynx_njrat

kernel32

user32

advapi32

generic