General
- Target 2026-07-10_82231dcce8d890a46958f5aaf3575821_amadey_elex_luca-stealer_lynx_njrat
- Size 1.0MB
- Sample260710-pyyp4sbx5j
- SHA256 8402994fa5bd20a2737a948b0177d0f1e9fddb53d190cfeadc53ec1f3754e497
- MD5 82231dcce8d890a46958f5aaf3575821
- SHA1 e965eccdf849ddc4d32c935b64bb9524007fd081
- SHA512 ab01c67465d81fe840dd7c8ead3c91c98ac1d402fa7e3ea1e25cec494ac3a630d9a38c1931b20647eaaf4cae799bd482087ecf29f1d49b0144a5471f960df7b9
- SSDEEP 24576:QXyKSp2Flj/T+oQJbykCSdkwAq5CKsEquYuIb9StAVybf6N0JBUUuZo:QXyLp2Fl9Q5bRYuPUVo
- TLSH T1A5256CC9B292C1A2C45921343D35A73224651C797722CBD77FA03FA30D7C9C8AAB7979
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_82231dcce8d890a46958f5aaf3575821_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_82231dcce8d890a46958f5aaf3575821_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_82231dcce8d890a46958f5aaf3575821_amadey_elex_luca-stealer_lynx_njrat
- Size 1.0MB
- SHA256 8402994fa5bd20a2737a948b0177d0f1e9fddb53d190cfeadc53ec1f3754e497
- MD5 82231dcce8d890a46958f5aaf3575821
- SHA1 e965eccdf849ddc4d32c935b64bb9524007fd081
- SHA512 ab01c67465d81fe840dd7c8ead3c91c98ac1d402fa7e3ea1e25cec494ac3a630d9a38c1931b20647eaaf4cae799bd482087ecf29f1d49b0144a5471f960df7b9
- SSDEEP 24576:QXyKSp2Flj/T+oQJbykCSdkwAq5CKsEquYuIb9StAVybf6N0JBUUuZo:QXyLp2Fl9Q5bRYuPUVo
- TLSH T1A5256CC9B292C1A2C45921343D35A73224651C797722CBD77FA03FA30D7C9C8AAB7979
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.