2026-07-04_1e1ad50b39d92b531cedd84affc82bb0_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-04_1e1ad50b39d92b531cedd84affc82bb0_amadey_elex_luca-stealer_lynx_njrat
Size 1.6MB
Sample260704-msn8daev3x
SHA256 ddc4513b2a8745270c21f54eba2043ba2e774168aa6a5f2837fe8bf37b434713
MD5 1e1ad50b39d92b531cedd84affc82bb0
SHA1 5bcdc15e6a490f5af698e89d30ec3d667d521d19
SHA512 2aa20df5a0c740c7d39483675794d37a4fd1c2c63668273b93e1f26a789784dde8b837eb6aa06ac0b0275c87417707483072db49ba1ed1f12b822c04e1e2e43c
SSDEEP 24576:P6DQSagCFts/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:S8S9CFtsLNiXicJFFRGNzj3
TLSH
T17F75E043B6C08031EDF615360DB49BB95A3E7D214BE759CF93942ABE5A30EC18A34727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-04_1e1ad50b39d92b531cedd84affc82bb0_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-07-04_1e1ad50b39d92b531cedd84affc82bb0_amadey_elex_luca-stealer_lynx_njrat

.exe 1.6MB

2026-07-04_1e1ad50b39d92b531cedd84affc82bb0_amadey_elex_luca-stealer_lynx_njrat

IMPHASH ed47739ecc284a43a5b5039f0d285da2
SHA256 ddc4513b2a8745270c21f54eba2043ba2e774168aa6a5f2837fe8bf37b434713
MD5 1e1ad50b39d92b531cedd84affc82bb0
SHA1 5bcdc15e6a490f5af698e89d30ec3d667d521d19
SHA512 2aa20df5a0c740c7d39483675794d37a4fd1c2c63668273b93e1f26a789784dde8b837eb6aa06ac0b0275c87417707483072db49ba1ed1f12b822c04e1e2e43c
SSDEEP 24576:P6DQSagCFts/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:S8S9CFtsLNiXicJFFRGNzj3
TLSH
T17F75E043B6C08031EDF615360DB49BB95A3E7D214BE759CF93942ABE5A30EC18A34727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39363

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Jenkins\workspace\MBAM-Windows\N_MBUpdateDlg\bin\Win32\Release\MBUpdateDlg.pdb

kernel32

LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW CreateFileW ReadConsoleW FindResourceExW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc LockResource GetLastError HeapSize InitializeCriticalSectionEx SetThreadUILanguage GetCurrentProcess HeapFree SetStdHandle SizeofResource IsDebuggerPresent OutputDebugStringW RaiseException EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStringTypeW WideCharToMultiByte EncodePointer LCMapStringEx GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetModuleFileNameW GetStdHandle WriteFile GetFileType LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile WriteConsoleW

user32

SetWindowPos MessageBoxW SendMessageW CloseWindow ShowWindow SetTimer KillTimer GetDesktopWindow LoadImageW

advapi32

RegCloseKey InitiateSystemShutdownExW LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueExW OpenProcessToken RegOpenKeyExW

shell32

ShellExecuteW

comctl32

ord345

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-04_1e1ad50b39d92b531cedd84affc82bb0_amadey_elex_luca-stealer_lynx_njrat

kernel32

user32

advapi32

shell32

comctl32

generic