General
- Target 2026-07-30_e371f68bc9ed12fcc8444a666fba8910_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.5MB
- Sample260730-r6lfvsbb79
- SHA256 470921e29e7c6fba67901548d0a2fd5a4b7a48b33c86b2f5de9bf8382a4f4164
- MD5 e371f68bc9ed12fcc8444a666fba8910
- SHA1 0addd20549851871e5a33065b1a56e0b1f406049
- SHA512 94e41294f8a7ea5066b31acefe5dc67f89779c43788dbbf235c69d28dc8a052c4fc2c29ce00a33cf868ea6b929624dc251cc0e230d5ae20e9013c50713ee18fe
- SSDEEP 196608:lZgKvbnCBnF4jDVcVh8Wu+4HusYLNEdpGaEprzxXyFkhd:zgKfNcVC5khqpspr1wO
- TLSH T1FEA62380F252F558E365013049386AA455762A303755D9EBBFCF39C69A282D3BEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_e371f68bc9ed12fcc8444a666fba8910_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_e371f68bc9ed12fcc8444a666fba8910_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_e371f68bc9ed12fcc8444a666fba8910_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.5MB
- SHA256 470921e29e7c6fba67901548d0a2fd5a4b7a48b33c86b2f5de9bf8382a4f4164
- MD5 e371f68bc9ed12fcc8444a666fba8910
- SHA1 0addd20549851871e5a33065b1a56e0b1f406049
- SHA512 94e41294f8a7ea5066b31acefe5dc67f89779c43788dbbf235c69d28dc8a052c4fc2c29ce00a33cf868ea6b929624dc251cc0e230d5ae20e9013c50713ee18fe
- SSDEEP 196608:lZgKvbnCBnF4jDVcVh8Wu+4HusYLNEdpGaEprzxXyFkhd:zgKfNcVC5khqpspr1wO
- TLSH T1FEA62380F252F558E365013049386AA455762A303755D9EBBFCF39C69A282D3BEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.