General
- Target 2026-07-06_e8aa37b5e632aad6e36eac90aa2d1dc7_amadey_elex_luca-stealer_lynx_njrat
- Size 1.1MB
- Sample260707-ajzxasbs8l
- SHA256 42fff6c69ca79a94c61270532ff71ea581bba45eb6a888ca8aee6e6229b9cb16
- MD5 e8aa37b5e632aad6e36eac90aa2d1dc7
- SHA1 1d82d91b44d80f3dcf8bc0f73a3d988dde27caae
- SHA512 f7fffa0e60596afa2157d2db73c70f4e7be8cd58b5d8a5a0598830409e86c5f49b25816b05026f801b349a97ba6421b9fe3c9f8a244b2ee576a634900e83a048
- SSDEEP 24576:IHv9VDzhVtJdH+MgNPuHHASIbGKiARu6W2qTxi9trwUl7eFsj:I5JR+DPQAScGhARub2tkrFs
- TLSH T12B45E026F412C432E1B112F0697DABA6906DBC354B6449CBB3C45E6A49706E37F32E37
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_e8aa37b5e632aad6e36eac90aa2d1dc7_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_e8aa37b5e632aad6e36eac90aa2d1dc7_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260706-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_e8aa37b5e632aad6e36eac90aa2d1dc7_amadey_elex_luca-stealer_lynx_njrat
- Size 1.1MB
- SHA256 42fff6c69ca79a94c61270532ff71ea581bba45eb6a888ca8aee6e6229b9cb16
- MD5 e8aa37b5e632aad6e36eac90aa2d1dc7
- SHA1 1d82d91b44d80f3dcf8bc0f73a3d988dde27caae
- SHA512 f7fffa0e60596afa2157d2db73c70f4e7be8cd58b5d8a5a0598830409e86c5f49b25816b05026f801b349a97ba6421b9fe3c9f8a244b2ee576a634900e83a048
- SSDEEP 24576:IHv9VDzhVtJdH+MgNPuHHASIbGKiARu6W2qTxi9trwUl7eFsj:I5JR+DPQAScGhARub2tkrFs
- TLSH T12B45E026F412C432E1B112F0697DABA6906DBC354B6449CBB3C45E6A49706E37F32E37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1