General
- Target 2026-07-23_3bcf43a633fad14c35fe3517e551b98c_amadey_elex_luca-stealer_lynx_njrat
- Size 11.9MB
- Sample260723-ea4w4sfh83
- SHA256 9542c8c4caf4a6410cc2faa197b011e6e98b29704ab16061aa2f97e316a41ea6
- MD5 3bcf43a633fad14c35fe3517e551b98c
- SHA1 b108f1edd5ff5655bc74d5882e47ba2b26b15b71
- SHA512 f3af17dd7b9de92cacd3ec895855042a50dfcc5426a05631684172a7ebc8bbd4f37585609b71716e493bdede5166bffa3036ff946dc99b8fefb109c9bd739c82
- SSDEEP 196608:lI/4jc3oHka1pIIb/Em9U0690PkpeH7eYme/sgt6jiBgfOh/Kowa8j:y/4jH2Ib/hW069In7Ae/d4tOhOa8
- TLSH T182C633A53AF20562D1F68FF1ACF13857B668F23809949D1B5E14A5780F254F3F80B8AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_3bcf43a633fad14c35fe3517e551b98c_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
overlord
C2
-
45.94.31.227:5173
Targets
-
- Target 2026-07-23_3bcf43a633fad14c35fe3517e551b98c_amadey_elex_luca-stealer_lynx_njrat
- Size 11.9MB
- SHA256 9542c8c4caf4a6410cc2faa197b011e6e98b29704ab16061aa2f97e316a41ea6
- MD5 3bcf43a633fad14c35fe3517e551b98c
- SHA1 b108f1edd5ff5655bc74d5882e47ba2b26b15b71
- SHA512 f3af17dd7b9de92cacd3ec895855042a50dfcc5426a05631684172a7ebc8bbd4f37585609b71716e493bdede5166bffa3036ff946dc99b8fefb109c9bd739c82
- SSDEEP 196608:lI/4jc3oHka1pIIb/Em9U0690PkpeH7eYme/sgt6jiBgfOh/Kowa8j:y/4jH2Ib/hW069In7Ae/d4tOhOa8
- TLSH T182C633A53AF20562D1F68FF1ACF13857B668F23809949D1B5E14A5780F254F3F80B8AD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Executes dropped EXE