2026-08-01_84f7b78c0b8f7d908d86f79dbefb1440_amadey_elex_luca-stealer_lynx_njrat

General

Target
2026-08-01_84f7b78c0b8f7d908d86f79dbefb1440_amadey_elex_luca-stealer_lynx_njrat
Size 1.6MB
Sample260801-fps9laybrg
SHA256 aa9f6621da7e8adbda9c3c941031bafbb71591e76429871f121cb3f00b7219b1
MD5 84f7b78c0b8f7d908d86f79dbefb1440
SHA1 71af317f5d6850f3c96917929359837351c238f9
SHA512 ce212114c7c42cd7a302dbd445a65ba6cd864d90c8e0c919beefffe71355504fc9198fb710989d608decc7fbb37435543a47e7181c558d36c1374ce5b6315247
SSDEEP 49152:71eRAjcbeBPHHY3nttCT8HSYLDlexvWlki:71m0kmRYLDlex
TLSH
T12E752392B9D1C076D8671A7199F5EFB4992DFC214F6018DB63C8073A8F319C09B24E6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_84f7b78c0b8f7d908d86f79dbefb1440_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-01_84f7b78c0b8f7d908d86f79dbefb1440_amadey_elex_luca-stealer_lynx_njrat

.exe 1.6MB

2026-08-01_84f7b78c0b8f7d908d86f79dbefb1440_amadey_elex_luca-stealer_lynx_njrat

IMPHASH 53ff33fd5198e78ab468db682bbdf2b7
SHA256 aa9f6621da7e8adbda9c3c941031bafbb71591e76429871f121cb3f00b7219b1
MD5 84f7b78c0b8f7d908d86f79dbefb1440
SHA1 71af317f5d6850f3c96917929359837351c238f9
SHA512 ce212114c7c42cd7a302dbd445a65ba6cd864d90c8e0c919beefffe71355504fc9198fb710989d608decc7fbb37435543a47e7181c558d36c1374ce5b6315247
SSDEEP 49152:71eRAjcbeBPHHY3nttCT8HSYLDlexvWlki:71m0kmRYLDlex
TLSH
T12E752392B9D1C076D8671A7199F5EFB4992DFC214F6018DB63C8073A8F319C09B24E6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

29385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject LoadLibraryW CreateThread MultiByteToWideChar GetStringTypeW WideCharToMultiByte CloseHandle GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess SetEndOfFile RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx FlushFileBuffers ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap CreateFileW ReadConsoleW HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_84f7b78c0b8f7d908d86f79dbefb1440_amadey_elex_luca-stealer_lynx_njrat

kernel32

generic