General
- Target 2026-08-02_f69ecab92ae404cd33acb4e738f544bb_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.5MB
- Sample260802-tlpznacl9w
- SHA256 c1e390948dd4f61d136a3d09767c300c68cf3e5a170b7037ec86f67e7fe849bb
- MD5 f69ecab92ae404cd33acb4e738f544bb
- SHA1 5d1be8904754147167a63dcc1437a40a6202ca1f
- SHA512 5fd820411ae3cd69c211d17dbe8d883a0d66944001174d27091732db55376ddb2a917f72de074bc57b7de150868e3fa07d943ca98a16c2dc9dfaf76a36ebe071
- SSDEEP 196608:vF3ZquCzya1es4Y/6kw6Hdk6kL+SjmtFFF2OdPH/kegar6XyFkhl:93QuOya4zY/6kw6tRSqtFFI0PsefewC
- TLSH T17CA622D0B265F429E3610130583976A4596B2D303B51DAEBBF8B36D249382D3ADB1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_f69ecab92ae404cd33acb4e738f544bb_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_f69ecab92ae404cd33acb4e738f544bb_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_f69ecab92ae404cd33acb4e738f544bb_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.5MB
- SHA256 c1e390948dd4f61d136a3d09767c300c68cf3e5a170b7037ec86f67e7fe849bb
- MD5 f69ecab92ae404cd33acb4e738f544bb
- SHA1 5d1be8904754147167a63dcc1437a40a6202ca1f
- SHA512 5fd820411ae3cd69c211d17dbe8d883a0d66944001174d27091732db55376ddb2a917f72de074bc57b7de150868e3fa07d943ca98a16c2dc9dfaf76a36ebe071
- SSDEEP 196608:vF3ZquCzya1es4Y/6kw6Hdk6kL+SjmtFFF2OdPH/kegar6XyFkhl:93QuOya4zY/6kw6tRSqtFFI0PsefewC
- TLSH T17CA622D0B265F429E3610130583976A4596B2D303B51DAEBBF8B36D249382D3ADB1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.