2026-07-14_0ad7f922441f254c60b226998ae45d2c_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

General

Target
2026-07-14_0ad7f922441f254c60b226998ae45d2c_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
Size 2.1MB
Sample260714-2plemshs6v
SHA256 f58ffd484c6ff3d6f2cb6fa429bbd0ce25fe0e4ef287199d2291fa947c31a5d3
MD5 0ad7f922441f254c60b226998ae45d2c
SHA1 6045774cefa25b5729806d6bb71a2d88f2257c56
SHA512 f0ab6dde72fb748ef94f5169b9858a4609d597339a77de287beb811d7e5ce3e67a904085836f93a57b8f78a8348159c9d251849fcddc07ffbf818351030b6568
SSDEEP 49152:tHMqIVKgZbfMJjkY2poPYtli3kjsl82ot4+Ej2Ez+lneVqkPQETZhSGRucwHfJ4B:58EAYZlkjsl82ot4+Ej2Ez+lneVqkPQH
TLSH
T10BA5AE31795A8563CE9641B2526C7B76829CE8210F352AC763881FEEB7645E32F31C37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-14_0ad7f922441f254c60b226998ae45d2c_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-07-14_0ad7f922441f254c60b226998ae45d2c_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 2.1MB

2026-07-14_0ad7f922441f254c60b226998ae45d2c_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 81db3ca17da7163336eacc95d0b0ccf9
SHA256 f58ffd484c6ff3d6f2cb6fa429bbd0ce25fe0e4ef287199d2291fa947c31a5d3
MD5 0ad7f922441f254c60b226998ae45d2c
SHA1 6045774cefa25b5729806d6bb71a2d88f2257c56
SHA512 f0ab6dde72fb748ef94f5169b9858a4609d597339a77de287beb811d7e5ce3e67a904085836f93a57b8f78a8348159c9d251849fcddc07ffbf818351030b6568
SSDEEP 49152:tHMqIVKgZbfMJjkY2poPYtli3kjsl82ot4+Ej2Ez+lneVqkPQETZhSGRucwHfJ4B:58EAYZlkjsl82ot4+Ej2Ez+lneVqkPQH
TLSH
T10BA5AE31795A8563CE9641B2526C7B76829CE8210F352AC763881FEEB7645E32F31C37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4671

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\j\msdk3\build\Khronos-Tools\repo\build32\vulkaninfo\RelWithDebInfo\vulkaninfo.pdb

kernel32

Sleep FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryExA LoadLibraryA GetConsoleScreenBufferInfo SetErrorMode SetConsoleWindowInfo SetConsoleTitleA GetConsoleProcessList WriteConsoleW HeapSize CreateFileW GetProcessHeap SetConsoleScreenBufferSize GetStdHandle FormatMessageA WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection LocalFree EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetCurrentThread HeapAlloc HeapFree SetConsoleCtrlHandler GetTempPathW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW GetTimeZoneInformation HeapReAlloc OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle SetEndOfFile

user32

LoadCursorA MonitorFromWindow

gdi32

GetStockObject

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

258KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

612KB

Virtual Size

616KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-14_0ad7f922441f254c60b226998ae45d2c_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

kernel32

user32

gdi32

generic