2026-07-20_9401614df87930d223ef4230db53124d_amadey_elex_luca-stealer_lynx_njrat

General

Target
2026-07-20_9401614df87930d223ef4230db53124d_amadey_elex_luca-stealer_lynx_njrat
Size 3.4MB
Sample260720-xt72zscw3m
SHA256 bf9270f0b2ce4a3595bbcecd1cf5e9c024c95f57d4715f37f23437e20b698673
MD5 9401614df87930d223ef4230db53124d
SHA1 6c1a3a4610c439319fd3669af18c1bc6e81b4921
SHA512 43dc29e36c0af7cd61cd5d171d5524c713610de600d7414e3b2215ced406a590a5fb79f71349ac1003cfa0566fb47838005584187520c5137a6f10e1c2da5569
SSDEEP 49152:VdSlqQ+dPkbljU3HlH2VqFu/F/m7tP3nkswB/c5KgGRQq:6qF2V+u/52xjKgs
TLSH
T186F5F962F7520DF2C98340B0CD766B66CB5AEC780BF107B37B32561EA4796C13525B8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_9401614df87930d223ef4230db53124d_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-07-20_9401614df87930d223ef4230db53124d_amadey_elex_luca-stealer_lynx_njrat

.exe 3.4MB

2026-07-20_9401614df87930d223ef4230db53124d_amadey_elex_luca-stealer_lynx_njrat

IMPHASH 5d016c7a4caeb583e383da7b62cbf15d
SHA256 bf9270f0b2ce4a3595bbcecd1cf5e9c024c95f57d4715f37f23437e20b698673
MD5 9401614df87930d223ef4230db53124d
SHA1 6c1a3a4610c439319fd3669af18c1bc6e81b4921
SHA512 43dc29e36c0af7cd61cd5d171d5524c713610de600d7414e3b2215ced406a590a5fb79f71349ac1003cfa0566fb47838005584187520c5137a6f10e1c2da5569
SSDEEP 49152:VdSlqQ+dPkbljU3HlH2VqFu/F/m7tP3nkswB/c5KgGRQq:6qF2V+u/52xjKgs
TLSH
T186F5F962F7520DF2C98340B0CD766B66CB5AEC780BF107B37B32561EA4796C13525B8A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

3579904

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dvs\p4\build\sw\rel\gpu_drv\r610\r610_45\drivers\nvcamera\redist\_out\wddm2_x86_release\SphericalEquirect32.pdb

windowscodecs

WICConvertBitmapSource

kernel32

ExitThread DecodePointer GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection QueryPerformanceCounter FormatMessageA WideCharToMultiByte CloseHandle WaitForSingleObjectEx SwitchToThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo MultiByteToWideChar ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LocalFree GetLocaleInfoEx EncodePointer LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead OutputDebugStringW RaiseException RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW CreateThread FreeLibraryAndExitThread GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapSize CreateFileW WriteConsoleW SetEndOfFile DeleteFileW LocalAlloc lstrlenA ReplaceFileW InitializeCriticalSection DebugBreak ReleaseSemaphore WaitForSingleObject CreateSemaphoreA

ole32

CoCreateInstance CoInitializeEx CoUninitialize

Name

.text

Size

991KB

Virtual Size

991KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.msvcjmc

Size

512B

Virtual Size

293B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.zero

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_9401614df87930d223ef4230db53124d_amadey_elex_luca-stealer_lynx_njrat

windowscodecs

kernel32

ole32

generic