General
- Target 2026-07-22_3a370fc66f4ede462857a9636de34a9a_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 1.9MB
- Sample260723-aencpsxdqf
- SHA256 c787cc3ff87cad394f74753db36468a9bb5063183da73ffb0186e0c7d6be3e8b
- MD5 3a370fc66f4ede462857a9636de34a9a
- SHA1 178bfcb988ffa7848b299d480d96618ff645d3a0
- SHA512 1f1cc22561850f423565eefd48de8e9d79fe2243f7bb5e401d043c1704872a8c56a55cecd1b69b7ff61bd566d72513938f5a1a4441bc603c5bc93a60d9ae8b28
- SSDEEP 49152:fcABQwHqLgsQfkGsKGzKl++eRxCm3fGrdkjsl82ot4+Ej2EkCPRwqVQDmg27RnWm:ELgFf42kjsl82ot4+Ej2EzED527BWG
- TLSH T1D695BE70F9808026DDE152F186AC7B66046DE864077499D7E3C40FDEA6A43D2AE32DF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_3a370fc66f4ede462857a9636de34a9a_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_3a370fc66f4ede462857a9636de34a9a_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 1.9MB
- SHA256 c787cc3ff87cad394f74753db36468a9bb5063183da73ffb0186e0c7d6be3e8b
- MD5 3a370fc66f4ede462857a9636de34a9a
- SHA1 178bfcb988ffa7848b299d480d96618ff645d3a0
- SHA512 1f1cc22561850f423565eefd48de8e9d79fe2243f7bb5e401d043c1704872a8c56a55cecd1b69b7ff61bd566d72513938f5a1a4441bc603c5bc93a60d9ae8b28
- SSDEEP 49152:fcABQwHqLgsQfkGsKGzKl++eRxCm3fGrdkjsl82ot4+Ej2EkCPRwqVQDmg27RnWm:ELgFf42kjsl82ot4+Ej2EzED527BWG
- TLSH T1D695BE70F9808026DDE152F186AC7B66046DE864077499D7E3C40FDEA6A43D2AE32DF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1