2026-07-20_2569c3df663eeeb98cf15522a9923350_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_2569c3df663eeeb98cf15522a9923350_amadey_elex_luca-stealer_lynx_njrat
Size 1.7MB
Sample260720-mcg45aev8j
SHA256 e01f27f1596a87e14dd3f97238673b12252b50778760a3d2971583b3fc4f39ed
MD5 2569c3df663eeeb98cf15522a9923350
SHA1 56d7e58949f6cc238e3ec4f62378ff3aefbc6eb6
SHA512 0f5ab770e695bb4dc6d5bf573590aa1aeeb04745a3b752927116ae81e068cd0dbf02511e2c2380e1373afe71f1d63df19d52822fa27c01d849cf222b5d8eadc7
SSDEEP 12288:kT4bhZpf5mV/7cxNJNTpWSgN/wwRN0UL0G/TVOo3HC75nSE33b9YvFHv:kT4dZpQV/Q/dCN/j2GLl3iFSE33b9y
TLSH
T1B785F111B491C031E473523716B8EFB59A3CB9704B6559CF97C40EBFDB302C1AA36A6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_2569c3df663eeeb98cf15522a9923350_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-07-20_2569c3df663eeeb98cf15522a9923350_amadey_elex_luca-stealer_lynx_njrat

.exe 1.7MB

2026-07-20_2569c3df663eeeb98cf15522a9923350_amadey_elex_luca-stealer_lynx_njrat

IMPHASH c8ab36bbb3af1cb5f117b3a1b17a8312
SHA256 e01f27f1596a87e14dd3f97238673b12252b50778760a3d2971583b3fc4f39ed
MD5 2569c3df663eeeb98cf15522a9923350
SHA1 56d7e58949f6cc238e3ec4f62378ff3aefbc6eb6
SHA512 0f5ab770e695bb4dc6d5bf573590aa1aeeb04745a3b752927116ae81e068cd0dbf02511e2c2380e1373afe71f1d63df19d52822fa27c01d849cf222b5d8eadc7
SSDEEP 12288:kT4bhZpf5mV/7cxNJNTpWSgN/wwRN0UL0G/TVOo3HC75nSE33b9YvFHv:kT4dZpQV/Q/dCN/j2GLl3iFSE33b9y
TLSH
T1B785F111B491C031E473523716B8EFB59A3CB9704B6559CF97C40EBFDB302C1AA36A6A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

68053

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\git\crashpad\build_crashpad-master\crashpad\out\x86\crashpad_handler_extension.pdb

dbgeng

DebugCreate

ole32

StringFromCLSID CoCreateGuid CoTaskMemFree

shlwapi

PathFileExistsW

kernel32

TerminateProcess HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW QueryDosDeviceW FindFirstVolumeW WriteFile CreateFileW GetLastError GetDiskFreeSpaceExW CloseHandle FindVolumeClose GetVolumePathNamesForVolumeNameW FindNextVolumeW ReadFile WritePrivateProfileStringW SwitchToThread GetProcAddress GetCurrentProcessId GetModuleHandleW GetCurrentThreadId SetLastError GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess WriteConsoleW IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RaiseException RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx FlushFileBuffers ReadConsoleW

user32

EnumWindows GetWindowThreadProcessId GetWindowTextW GetWindowLongW GetClassNameW EnumChildWindows

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_2569c3df663eeeb98cf15522a9923350_amadey_elex_luca-stealer_lynx_njrat

dbgeng

ole32

shlwapi

kernel32

user32

generic