General
- Target 2026-07-28_cf67fe4be1e09d29b0f80c463ad5eb8f_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.5MB
- Sample260729-am1yrsch56
- SHA256 63162c4aaf7af99c69e49a766b420f87aba8122f344bcee0ebc8426c86178c77
- MD5 cf67fe4be1e09d29b0f80c463ad5eb8f
- SHA1 91fabbd49f0439914d55f24326fc04238f2df314
- SHA512 4d47f9a5b1e738a1346680473ba5fac6b40ae03bc8903fa91f7d191a1fc7d287ce2389d403779840e593283be57157badf27a8ee1229fa257874f31a82053c4d
- SSDEEP 196608:PDqkjjPhQBKX/9yomRVDYUEWNAQLQGvlroIbvjYXyFkhv:rq+bh+C1mV81mZvlrZIws
- TLSH T15EA622D0F225F569D7A00130482876B4496B6A303750E8EBBF9F36D659692D3ADB0F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_cf67fe4be1e09d29b0f80c463ad5eb8f_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_cf67fe4be1e09d29b0f80c463ad5eb8f_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_cf67fe4be1e09d29b0f80c463ad5eb8f_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.5MB
- SHA256 63162c4aaf7af99c69e49a766b420f87aba8122f344bcee0ebc8426c86178c77
- MD5 cf67fe4be1e09d29b0f80c463ad5eb8f
- SHA1 91fabbd49f0439914d55f24326fc04238f2df314
- SHA512 4d47f9a5b1e738a1346680473ba5fac6b40ae03bc8903fa91f7d191a1fc7d287ce2389d403779840e593283be57157badf27a8ee1229fa257874f31a82053c4d
- SSDEEP 196608:PDqkjjPhQBKX/9yomRVDYUEWNAQLQGvlroIbvjYXyFkhv:rq+bh+C1mV81mZvlrZIws
- TLSH T15EA622D0F225F569D7A00130482876B4496B6A303750E8EBBF9F36D659692D3ADB0F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.