2026-07-22_b3c4ff50b2e3ec6ae964c3e9bd3babd0_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-22_b3c4ff50b2e3ec6ae964c3e9bd3babd0_amadey_elex_luca-stealer_lynx_njrat
Size 2.7MB
Sample260722-3dptcsdd87
SHA256 cdbad8079a664ab5d049e8aa8f9f42ab48be7e8557b72f2e49a76d280f3b826c
MD5 b3c4ff50b2e3ec6ae964c3e9bd3babd0
SHA1 8b3a5e69d44ad5e0ea5f6a22f2e8465a688cf7ba
SHA512 5486dd34c18cd5ed88e31d291a9bb031c39ac546f25fb8f5c8a7ce6a1c7a72e554fbf47f0a62bc86f3f417e5cd4dfca0938596e58ffc950f5ebe860d593e8a04
SSDEEP 49152:j47PD0bQ3dMGRukYyejJQxhUpDmg27RnWGj:UbKQ3dMGLQjHD527BWG
TLSH
T151D56E40BADA8225F0F657F0AABF86D1823B7C116D70D19F7294115A0AB0B83DB76737
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_b3c4ff50b2e3ec6ae964c3e9bd3babd0_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-07-22_b3c4ff50b2e3ec6ae964c3e9bd3babd0_amadey_elex_luca-stealer_lynx_njrat

.exe 2.7MB

2026-07-22_b3c4ff50b2e3ec6ae964c3e9bd3babd0_amadey_elex_luca-stealer_lynx_njrat

IMPHASH 9e49d3b28ba10e5bf37c7d162352d2d5
SHA256 cdbad8079a664ab5d049e8aa8f9f42ab48be7e8557b72f2e49a76d280f3b826c
MD5 b3c4ff50b2e3ec6ae964c3e9bd3babd0
SHA1 8b3a5e69d44ad5e0ea5f6a22f2e8465a688cf7ba
SHA512 5486dd34c18cd5ed88e31d291a9bb031c39ac546f25fb8f5c8a7ce6a1c7a72e554fbf47f0a62bc86f3f417e5cd4dfca0938596e58ffc950f5ebe860d593e8a04
SSDEEP 49152:j47PD0bQ3dMGRukYyejJQxhUpDmg27RnWGj:UbKQ3dMGLQjHD527BWG
TLSH
T151D56E40BADA8225F0F657F0AABF86D1823B7C116D70D19F7294115A0AB0B83DB76737
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

370624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\source\installer-legacy\HDMI\Release\GFX.pdb

kernel32

MoveFileW RemoveDirectoryW GetCurrentDirectoryW LocalAlloc CreateFileW GetFileSize ReadFile MultiByteToWideChar GetFileTime FileTimeToSystemTime SystemTimeToTzSpecificLocalTime LoadLibraryW CreateMutexW CreateThread lstrlenW WriteFile GetPrivateProfileStringW GetLocalTime GetCommandLineW GetTickCount SetFilePointer EnumResourceLanguagesW GetUserDefaultLangID GetUserDefaultUILanguage GetVersion ConvertDefaultLocale GetLocaleInfoW GetCurrentProcess GetSystemInfo GetSystemWow64DirectoryW OpenProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW TerminateProcess GetExitCodeProcess CreateEventW SetEvent GlobalAlloc GlobalLock GlobalUnlock GlobalFree ExitProcess WriteConsoleW CompareFileTime GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW HeapReAlloc GetFileSizeEx FlushFileBuffers SetEndOfFile SetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW CompareStringW HeapFree HeapAlloc GetStdHandle GetModuleHandleExW SetFilePointerEx GetConsoleCP ReadConsoleW GetConsoleMode GetFileType InitializeCriticalSectionAndSpinCount RtlUnwind InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter HeapSize GetStartupInfoW CopyFileW GetTempFileNameW GetTempPathW GetEnvironmentVariableW GetSystemDirectoryW GetFileAttributesW FreeLibrary GetProcAddress LoadLibraryExW SetErrorMode Sleep SetFileAttributesW DeleteFileW MoveFileExW WaitForSingleObject CreateProcessW SetLastError VerifyVersionInfoW VerSetConditionMask GetWindowsDirectoryW FindNextFileW FindClose FindFirstFileW GetVersionExW LocalFree GetModuleFileNameW GetLastError SizeofResource LockResource LoadResource FindResourceW GetModuleHandleW TlsSetValue SetFileAttributesA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime TlsGetValue WideCharToMultiByte CloseHandle CreateFileA TlsFree TlsAlloc IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo LCMapStringEx DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection DecodePointer EncodePointer GetStringTypeW LoadLibraryExA VirtualQuery VirtualProtect RaiseException

user32

GetSystemMenu wsprintfW GetDlgItem SendMessageW ShowWindow EndDialog SetDlgItemTextW SetTimer SendDlgItemMessageW KillTimer MessageBoxW MonitorFromWindow GetMonitorInfoW OffsetRect AdjustWindowRect GetWindowRect DrawTextW LoadIconW GetSystemMetrics SetRectEmpty SendInput PostMessageW EnableWindow DialogBoxIndirectParamW EnableMenuItem SetFocus FillRect GetWindowLongW SetWindowLongW SetWindowPos SetWindowTextW GetClientRect ReleaseDC GetWindowTextW GetWindowTextLengthW GetDC MessageBoxIndirectW LoadImageW SendMessageTimeoutW ExitWindowsEx EnumWindows GetWindowThreadProcessId GetWindowModuleFileNameW LoadStringW DialogBoxParamW

gdi32

GetDeviceCaps SetBkMode SetTextColor GetStockObject DeleteDC StretchBlt BitBlt CreateCompatibleDC GetObjectW GetTextExtentPoint32W SelectObject DeleteObject CreateFontW

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken DeleteService ControlService QueryServiceConfigW StartServiceW CloseServiceHandle ChangeServiceConfigW ChangeServiceConfig2W CreateServiceW OpenServiceW OpenSCManagerW QueryServiceStatus RegEnumKeyExW RegDeleteValueW RegQueryInfoKeyW RegDeleteKeyW IsTextUnicode FreeSid IsValidSid LookupAccountNameW SetSecurityDescriptorDacl InitializeSecurityDescriptor SetEntriesInAclW RegSetValueExW RegCreateKeyExW SetNamedSecurityInfoW GetNamedSecurityInfoW RegEnumValueW RegCloseKey RegQueryValueExW RegOpenKeyExW

ole32

PropVariantClear CLSIDFromString CoTaskMemFree CoCreateInstance CoUninitialize CoInitializeEx CoInitialize

oleaut32

SysFreeString SysAllocString VariantClear

newdev

DiInstallDriverW

Name

.text

Size

515KB

Virtual Size

514KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

169KB

Virtual Size

169KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

596KB

Virtual Size

600KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_b3c4ff50b2e3ec6ae964c3e9bd3babd0_amadey_elex_luca-stealer_lynx_njrat

kernel32

user32

gdi32

advapi32

ole32

oleaut32

newdev

generic