2026-07-11_756e3d976fc324ebcd43dd731525c243_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_756e3d976fc324ebcd43dd731525c243_amadey_elex_luca-stealer_lynx_njrat
Size 3.8MB
Sample260711-e4kekady3s
SHA256 fd4d452493790c754de92a53780d4702a3aebb3d2d6d304c556acce716138315
MD5 756e3d976fc324ebcd43dd731525c243
SHA1 d36771c5ad54fef6d93c4d78ce690c28ac3df94b
SHA512 c7e4b53a4785f3ff8c18a43c6627c1bd9cd8bd0189081ddde2304185a1c728dd6cebe33d4877472d65b69526099020b7362ad70606c3ef6be52f55bb4074d91b
SSDEEP 49152:P2ggggMjFF79THx4vxIYkS8/nNArYjRsxadDvHSipY7IRuNgZ7bVcCanvZ8VYftg:1fR4vxIYV8/nvd7d4EqghWnvZeYhs
TLSH
T17206E031B602C032E552417199BDAFBA8929BF354F7115EB73C43E2A1D305C3AE35A9B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_756e3d976fc324ebcd43dd731525c243_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-07-11_756e3d976fc324ebcd43dd731525c243_amadey_elex_luca-stealer_lynx_njrat

.exe 3.8MB

2026-07-11_756e3d976fc324ebcd43dd731525c243_amadey_elex_luca-stealer_lynx_njrat

IMPHASH 987221473139cc898b5c4f45bd6dff5d
SHA256 fd4d452493790c754de92a53780d4702a3aebb3d2d6d304c556acce716138315
MD5 756e3d976fc324ebcd43dd731525c243
SHA1 d36771c5ad54fef6d93c4d78ce690c28ac3df94b
SHA512 c7e4b53a4785f3ff8c18a43c6627c1bd9cd8bd0189081ddde2304185a1c728dd6cebe33d4877472d65b69526099020b7362ad70606c3ef6be52f55bb4074d91b
SSDEEP 49152:P2ggggMjFF79THx4vxIYkS8/nNArYjRsxadDvHSipY7IRuNgZ7bVcCanvZ8VYftg:1fR4vxIYV8/nvd7d4EqghWnvZeYhs
TLSH
T17206E031B602C032E552417199BDAFBA8929BF354F7115EB73C43E2A1D305C3AE35A9B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1197162

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vmagent_new\bin\joblist\932644\out\bin\SoftMgrSetup.pdb

kernel32

SetThreadLocale OpenMutexW GetCommandLineW FindFirstFileW GetDiskFreeSpaceExW SetFilePointerEx GetFileSizeEx lstrcmpA SystemTimeToFileTime GetLocalTime Process32NextW Process32FirstW CreateToolhelp32Snapshot GetPrivateProfileStringW GetPrivateProfileIntW FindResourceW SizeofResource LockResource LoadResource FindResourceExW GetProcessHeap HeapDestroy OutputDebugStringW WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage SetStdHandle ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers IsValidLocale GetFileType FreeLibraryAndExitThread ExitThread ExitProcess RtlUnwind FreeResource GetSystemWindowsDirectoryW lstrcmpiA InitializeSListHead GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter GetEnvironmentVariableW GetACP FormatMessageW GlobalSize lstrcmpiW DeviceIoControl ResumeThread InitializeCriticalSection GetProcessAffinityMask GlobalMemoryStatus FileTimeToSystemTime GetModuleHandleExW SetEndOfFile GetModuleHandleA FindNextFileW FindClose SetFileTime SetFileAttributesW DeleteFileW CreateDirectoryW GetCurrentDirectoryW WriteFile ReadFile GetStdHandle DeleteCriticalSection EnumSystemLocalesW GetUserDefaultLCID GetSystemDefaultLCID GetThreadLocale GetLocaleInfoW LCMapStringW WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetTimeFormatW GetDateFormatW GetTimeZoneInformation MulDiv SetThreadAffinityMask LocalFree GlobalFree GetProcAddress VerifyVersionInfoW GlobalLock GlobalUnlock TlsFree TlsSetValue TlsGetValue TlsAlloc HeapWalk HeapUnlock HeapLock CreateFileA LocalFileTimeToFileTime QueryPerformanceFrequency GetCPInfo TryEnterCriticalSection IsDebuggerPresent GetModuleHandleW GetModuleFileNameW FreeLibrary GetFileAttributesExW MoveFileExW GlobalAlloc UnmapViewOfFile GetVolumeInformationW SetFilePointer MapViewOfFile CreateFileMappingW VirtualFree VirtualAlloc GetVersionExW GetSystemDirectoryW GetTickCount GetSystemTimeAsFileTime GetSystemInfo IsProcessorFeaturePresent GetCurrentThreadId CreateThread TerminateProcess GetCurrentProcessId GetCurrentProcess CreateSemaphoreW Sleep GetFileAttributesW CreateEventW CreateMutexW WaitForSingleObjectEx WaitForSingleObject ReleaseMutex ReleaseSemaphore ResetEvent SetEvent InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection HeapSize HeapFree HeapReAlloc HeapAlloc QueryPerformanceCounter SetErrorMode SetLastError GetLastError RaiseException GetLongPathNameW GetFileInformationByHandle CreateFileW

user32

GetMessageW TranslateMessage DispatchMessageW SendMessageW PostMessageW DefWindowProcW PostQuitMessage RegisterClassW CreateWindowExW DestroyWindow UpdateLayeredWindow SetTimer GetSystemMetrics GetDC ReleaseDC MapWindowPoints GetWindowLongW SetWindowLongW FindWindowW GetWindowThreadProcessId LoadImageW MonitorFromWindow CharUpperW GetDesktopWindow DrawTextW GetSysColor ClientToScreen GetAsyncKeyState GetParent EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard UnionRect IntersectRect SetCursor EqualRect MonitorFromPoint LoadCursorW PtInRect IsRectEmpty OffsetRect ScreenToClient GetCursorPos SetWindowRgn GetUpdateRect EndPaint BeginPaint ReleaseCapture SetCapture GetKeyState GetFocus IsZoomed MoveWindow CallWindowProcW AttachThreadInput IsClipboardFormatAvailable IsWindow ShowWindow IsIconic BringWindowToTop SetActiveWindow GetForegroundWindow SetForegroundWindow RegisterClassExW SetWindowPos EnableWindow SetFocus GetMonitorInfoW GetWindow GetWindowRect GetClientRect SetWindowTextW KillTimer CharNextW PeekMessageW IsWindowVisible MessageBoxW wsprintfW InvalidateRect

gdi32

DeleteObject CreateFontIndirectW GetStockObject GetObjectW CreateRectRgnIndirect GetWindowOrgEx RestoreDC SaveDC ExtSelectClipRgn CreateCompatibleDC CreateRoundRectRgn SelectObject SetBkColor SetBkMode StretchBlt SetStretchBltMode SetTextColor CreateDIBSection GetObjectA SetWindowOrgEx GetDeviceCaps DeleteDC BitBlt

advapi32

RegEnumKeyExW RegEnumKeyExA RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegOpenKeyExA RegOpenKeyExW RegQueryValueExA RegQueryValueExW RegSetValueExW RegOpenKeyW CloseServiceHandle EnumServicesStatusW OpenSCManagerW GetUserNameW InitializeSecurityDescriptor SetSecurityDescriptorDacl ChangeServiceConfigW OpenServiceW QueryServiceObjectSecurity QueryServiceStatus SetServiceObjectSecurity StartServiceW OpenProcessToken RegQueryInfoKeyW

shell32

CommandLineToArgvW ShellExecuteW SHBrowseForFolderW SHGetSpecialFolderPathW ord165 SHGetPathFromIDListW SHGetFolderPathW

ole32

OleUninitialize CoUninitialize CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoCreateInstance CoTaskMemRealloc CoInitialize OleInitialize CreateStreamOnHGlobal CoCreateGuid

oleaut32

VarUI4FromStr VariantClear SysFreeString SysStringLen SysAllocString SysAllocStringLen VariantCopy VariantInit

shlwapi

PathRemoveFileSpecW PathFindFileNameW PathCombineW ord176 StrStrIW PathFileExistsW StrCmpIW SHGetValueW SHSetValueA StrTrimA PathCanonicalizeW SHSetValueW StrStrIA StrCmpNIW PathIsDirectoryW PathIsPrefixW SHGetValueA PathAppendW PathIsRelativeW

version

VerQueryValueW

psapi

GetModuleFileNameExW

iphlpapi

GetAdaptersInfo

comctl32

ord17 _TrackMouseEvent InitCommonControlsEx

winmm

timeKillEvent timeSetEvent

imm32

ImmSetCompositionWindow ImmDisableIME ImmGetContext ImmReleaseContext

wintrust

WTHelperProvDataFromStateData WinVerifyTrust

crypt32

CryptStringToBinaryW CertGetNameStringW

wininet

InternetCloseHandle HttpQueryInfoW HttpSendRequestW InternetOpenW InternetCrackUrlW HttpOpenRequestW InternetConnectW InternetSetOptionW

ntdll

VerSetConditionMask

gdiplus

GdipDrawPath GdipDrawEllipse GdipDrawRectangleI GdipFillPath GdipDrawLineI GdipGetWorldTransform GdipRotateWorldTransform GdipDrawImageRectI GdipSetImageAttributesColorMatrix GdipDisposeImageAttributes GdipCreateImageAttributes GdipGetImageGraphicsContext GdipSetPenDashArray GdipSetPenDashStyle GdipDrawImageRectRectI GdipSetClipPath GdipResetClip GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipDeleteFont GdipDrawString GdipMeasureString GdipStringFormatGetGenericTypographic GdipCreateLineBrushFromRectI GdipCreateSolidFill GdipAddPathEllipse GdipAddPathRectangle GdipDeleteStringFormat GdipCloneStringFormat GdipSetStringFormatFlags GdipFillEllipse GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipSetStringFormatTrimming GdipTranslateWorldTransform GdiplusStartup GdiplusShutdown GdipAlloc GdipFree GdipCloneImage GdipDisposeImage GdipDeleteGraphics GdipGetImageHeight GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetPropertyItemSize GdipGetPropertyItem GdipCreateBitmapFromStream GdipCreateBitmapFromStreamICM GdipCreatePen1 GdipDeletePen GdipCreateFromHDC GdipGetImageWidth GdipSetSmoothingMode GdipDrawArc GdipCreatePath GdipDeletePath GdipAddPathPath GdipCreateRegionPath GdipDeleteRegion GdipCloneBrush GdipDeleteBrush GdipCreatePathGradientFromPath GdipSetPathGradientPresetBlend GdipSetPathGradientWrapMode GdipSetPathGradientFocusScales GdipSetPixelOffsetMode GdipFillRegion GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipCreateMatrix GdipDeleteMatrix GdipTranslateMatrix GdipRotateMatrix GdipCreateLineBrushFromRect GdipSetLineBlend GdipCreatePen2 GdipLoadImageFromFile GdipImageRotateFlip GdipSetWorldTransform GdipDrawImageRect GdipClosePathFigure GdipAddPathLine GdipAddPathArc

msimg32

AlphaBlend

generic

count=31, id=259, version=29395,

count=212, id=261, version=29395,

count=1, id=262, version=29395,

count=2, id=260, productName=VS2017 v15.8.0 build 26726, version=26726,

count=1, productName=Unmarked objects (old),

count=4, id=261, version=30148,

count=4, id=253, version=28518,

count=23, id=260, version=30034,

count=30, id=259, version=30034,

count=68, id=261, version=30153,

count=3, id=261, version=27045,

count=10, id=260, version=27045,

count=1, id=263, version=29395,

count=103, id=261, version=30034,

count=40, id=260, version=29395,

count=55, id=257, version=29395,

count=805, id=1, productName=Unmarked objects,

count=1, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,

count=1, id=261, version=34435,

count=36, id=260, version=30147,

count=122, id=261, version=30147,

count=1, id=255, version=30147,

count=1, id=151,

count=1, id=258, version=30147,