General
- Target 2026-08-01_5a57df53a78a828e1cd41fb2b798e9ec_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260801-vchdwsdm4x
- SHA256 9a25dcf58b4a4257ef6e34c69c4e20471db36da70149ceddbf3834e13bb70a65
- MD5 5a57df53a78a828e1cd41fb2b798e9ec
- SHA1 639c2c48d78b25ccde2a4337189260db01863369
- SHA512 159e5100ed09004c54c0cd269d5ae789d9a349ad363d22d0a49e0ddf23a90483164ce91e6e6f85c0645f4535e75414f6b0f3be851e58de9f7568389dd9baaf0e
- SSDEEP 196608:8Tf54OygUQKnVK87LT1BMHbZqhLhaU/5LLZpkw8a3IKDjl9f:iOOvUQSVKj7ZsaELVpnYKDpp
- TLSH T11CA61280F225F656E79101308828767459661E303395DDABBF8B36D64AB82D3EDB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_5a57df53a78a828e1cd41fb2b798e9ec_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_5a57df53a78a828e1cd41fb2b798e9ec_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_5a57df53a78a828e1cd41fb2b798e9ec_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 9a25dcf58b4a4257ef6e34c69c4e20471db36da70149ceddbf3834e13bb70a65
- MD5 5a57df53a78a828e1cd41fb2b798e9ec
- SHA1 639c2c48d78b25ccde2a4337189260db01863369
- SHA512 159e5100ed09004c54c0cd269d5ae789d9a349ad363d22d0a49e0ddf23a90483164ce91e6e6f85c0645f4535e75414f6b0f3be851e58de9f7568389dd9baaf0e
- SSDEEP 196608:8Tf54OygUQKnVK87LT1BMHbZqhLhaU/5LLZpkw8a3IKDjl9f:iOOvUQSVKj7ZsaELVpnYKDpp
- TLSH T11CA61280F225F656E79101308828767459661E303395DDABBF8B36D64AB82D3EDB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE