General
- Target 2026-08-03_6550f5bb4720093ff1c40624cca9472c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260804-db3j1abh57
- SHA256 6db467cd71a98df9e6399f8506cfe26c68403632e44427549781e6699c5bff47
- MD5 6550f5bb4720093ff1c40624cca9472c
- SHA1 9ccd1750194f12d117bdf050f736fa80e7b77431
- SHA512 17a2abb6755d7650a69f6feca7731f1e816d3fa5acb44432429fbf20c65396b9a17430e29b0e9384dc3c6e3b9488825f0b9f5d11fdcd02b560122cade74328a1
- SSDEEP 196608:0C5Dn0yP9iYVwwUtyfNfm1T/5kydeA+1PmzAmt6l9G:5Dn0AVSylf8T/5k4eILk0
- TLSH T172A612C0F225F519D7650131882836A859662D303758D9ABBF8F7AD689382D3EDB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_6550f5bb4720093ff1c40624cca9472c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_6550f5bb4720093ff1c40624cca9472c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_6550f5bb4720093ff1c40624cca9472c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 6db467cd71a98df9e6399f8506cfe26c68403632e44427549781e6699c5bff47
- MD5 6550f5bb4720093ff1c40624cca9472c
- SHA1 9ccd1750194f12d117bdf050f736fa80e7b77431
- SHA512 17a2abb6755d7650a69f6feca7731f1e816d3fa5acb44432429fbf20c65396b9a17430e29b0e9384dc3c6e3b9488825f0b9f5d11fdcd02b560122cade74328a1
- SSDEEP 196608:0C5Dn0yP9iYVwwUtyfNfm1T/5kydeA+1PmzAmt6l9G:5Dn0AVSylf8T/5k4eILk0
- TLSH T172A612C0F225F519D7650131882836A859662D303758D9ABBF8F7AD689382D3EDB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE