General
- Target 2026-07-09_e126a21072dbb8515f78e62ccda3e1ca_amadey_elex_luca-stealer_lynx_njrat
- Size 1.5MB
- Sample260709-fn4zpscx2k
- SHA256 ce16e83ff6966af255a1ea5eb88da8a6f3fce61034086a931f77b0b0c45f97aa
- MD5 e126a21072dbb8515f78e62ccda3e1ca
- SHA1 d69444defdd2ce957e89a483c3611dc7a5f0e525
- SHA512 7e84d67c7af9c7b8b85176938a766c862dea71977cc7fb04e09e0934ac692597f0c52797a649113aa1001397ad2f0396ff3970b6bd185e46a1a41fbf1ba0e7c6
- SSDEEP 24576:kz1aNKpuPsFeSCIJCmeUaN95DPlsqjnhMgeiCl7G0nehbGZpbD:IaN6uPsFeSCIJPeUaN7PZDmg27RnWGj
- TLSH T18C75F1127684D032D87310310FA5EA796ABFF9306F6119CB67E06DAE9B349C18B3571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_e126a21072dbb8515f78e62ccda3e1ca_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_e126a21072dbb8515f78e62ccda3e1ca_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_e126a21072dbb8515f78e62ccda3e1ca_amadey_elex_luca-stealer_lynx_njrat
- Size 1.5MB
- SHA256 ce16e83ff6966af255a1ea5eb88da8a6f3fce61034086a931f77b0b0c45f97aa
- MD5 e126a21072dbb8515f78e62ccda3e1ca
- SHA1 d69444defdd2ce957e89a483c3611dc7a5f0e525
- SHA512 7e84d67c7af9c7b8b85176938a766c862dea71977cc7fb04e09e0934ac692597f0c52797a649113aa1001397ad2f0396ff3970b6bd185e46a1a41fbf1ba0e7c6
- SSDEEP 24576:kz1aNKpuPsFeSCIJCmeUaN95DPlsqjnhMgeiCl7G0nehbGZpbD:IaN6uPsFeSCIJPeUaN7PZDmg27RnWGj
- TLSH T18C75F1127684D032D87310310FA5EA796ABFF9306F6119CB67E06DAE9B349C18B3571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory