General
- Target 2026-07-14_0ad7f922441f254c60b226998ae45d2c_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 2.1MB
- Sample260714-2plemshs6v
- SHA256 f58ffd484c6ff3d6f2cb6fa429bbd0ce25fe0e4ef287199d2291fa947c31a5d3
- MD5 0ad7f922441f254c60b226998ae45d2c
- SHA1 6045774cefa25b5729806d6bb71a2d88f2257c56
- SHA512 f0ab6dde72fb748ef94f5169b9858a4609d597339a77de287beb811d7e5ce3e67a904085836f93a57b8f78a8348159c9d251849fcddc07ffbf818351030b6568
- SSDEEP 49152:tHMqIVKgZbfMJjkY2poPYtli3kjsl82ot4+Ej2Ez+lneVqkPQETZhSGRucwHfJ4B:58EAYZlkjsl82ot4+Ej2Ez+lneVqkPQH
- TLSH T10BA5AE31795A8563CE9641B2526C7B76829CE8210F352AC763881FEEB7645E32F31C37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_0ad7f922441f254c60b226998ae45d2c_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_0ad7f922441f254c60b226998ae45d2c_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 2.1MB
- SHA256 f58ffd484c6ff3d6f2cb6fa429bbd0ce25fe0e4ef287199d2291fa947c31a5d3
- MD5 0ad7f922441f254c60b226998ae45d2c
- SHA1 6045774cefa25b5729806d6bb71a2d88f2257c56
- SHA512 f0ab6dde72fb748ef94f5169b9858a4609d597339a77de287beb811d7e5ce3e67a904085836f93a57b8f78a8348159c9d251849fcddc07ffbf818351030b6568
- SSDEEP 49152:tHMqIVKgZbfMJjkY2poPYtli3kjsl82ot4+Ej2Ez+lneVqkPQETZhSGRucwHfJ4B:58EAYZlkjsl82ot4+Ej2Ez+lneVqkPQH
- TLSH T10BA5AE31795A8563CE9641B2526C7B76829CE8210F352AC763881FEEB7645E32F31C37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1