2026-08-02_942d147f42f071a554ea389510c186b6_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_942d147f42f071a554ea389510c186b6_amadey_elex_luca-stealer_lynx_njrat
Size 1.6MB
Sample260802-j65kqsfl2t
SHA256 f70c6ff0078fbd0077774a05a6e21061dcbd4737c51c578f59dcaee7320a969d
MD5 942d147f42f071a554ea389510c186b6
SHA1 3e6d313667740578f193d46c614c7c7febfc8c3f
SHA512 3cec313d90f697e21e8a5dabf651efff7d3787f9953f0fedc5c4b6ec51e78e8b7bcb0f42af513fcac45f88762fd33d3b954cfa2ab5322d5dea555c7834331337
SSDEEP 24576:+6DQSagCFtL/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:78S9CFtLLNiXicJFFRGNzj3
TLSH
T18775E043B6C08031EDF615360DB49BB95A3E7D214BE759CF93942ABE5A30EC18A34727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_942d147f42f071a554ea389510c186b6_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-02_942d147f42f071a554ea389510c186b6_amadey_elex_luca-stealer_lynx_njrat

.exe 1.6MB

2026-08-02_942d147f42f071a554ea389510c186b6_amadey_elex_luca-stealer_lynx_njrat

IMPHASH ed47739ecc284a43a5b5039f0d285da2
SHA256 f70c6ff0078fbd0077774a05a6e21061dcbd4737c51c578f59dcaee7320a969d
MD5 942d147f42f071a554ea389510c186b6
SHA1 3e6d313667740578f193d46c614c7c7febfc8c3f
SHA512 3cec313d90f697e21e8a5dabf651efff7d3787f9953f0fedc5c4b6ec51e78e8b7bcb0f42af513fcac45f88762fd33d3b954cfa2ab5322d5dea555c7834331337
SSDEEP 24576:+6DQSagCFtL/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:78S9CFtLLNiXicJFFRGNzj3
TLSH
T18775E043B6C08031EDF615360DB49BB95A3E7D214BE759CF93942ABE5A30EC18A34727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39363

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Jenkins\workspace\MBAM-Windows\N_MBUpdateDlg\bin\Win32\Release\MBUpdateDlg.pdb

kernel32

LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW CreateFileW ReadConsoleW FindResourceExW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc LockResource GetLastError HeapSize InitializeCriticalSectionEx SetThreadUILanguage GetCurrentProcess HeapFree SetStdHandle SizeofResource IsDebuggerPresent OutputDebugStringW RaiseException EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStringTypeW WideCharToMultiByte EncodePointer LCMapStringEx GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetModuleFileNameW GetStdHandle WriteFile GetFileType LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile WriteConsoleW

user32

SetWindowPos MessageBoxW SendMessageW CloseWindow ShowWindow SetTimer KillTimer GetDesktopWindow LoadImageW

advapi32

RegCloseKey InitiateSystemShutdownExW LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueExW OpenProcessToken RegOpenKeyExW

shell32

ShellExecuteW

comctl32

ord345

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_942d147f42f071a554ea389510c186b6_amadey_elex_luca-stealer_lynx_njrat

kernel32

user32

advapi32

shell32

comctl32

generic