General
- Target 2026-08-04_df8b9d6b56eb9c25b23ef62bbcb27c83_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260804-welprsbj7v
- SHA256 359060071aa586b69b8c1b88ac7258dd726dff992e0d63f33499cc8a994c42df
- MD5 df8b9d6b56eb9c25b23ef62bbcb27c83
- SHA1 b4c2fd6d55da2d8a4cd4e0860340cb0bc1f78ec9
- SHA512 feee29b4a021a99e1ec84a5de9c35c73781acd8d76386038b395f7976b61651d2ba0fd9221105265b739ac3790a3bf0d6c40b05224f6b1746bed1188de25c5ec
- SSDEEP 196608:1ICMpYtB3JKc/3gBFWvU+ObhiJLmSd/ARAHBJ2lbqPhNphbl9v:lE4/QBFYL9HfPDR9
- TLSH T1BFA612C0F225F555E7600170882876A849662E303795D9ABBF8B7AD649782D3ECF1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_df8b9d6b56eb9c25b23ef62bbcb27c83_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_df8b9d6b56eb9c25b23ef62bbcb27c83_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_df8b9d6b56eb9c25b23ef62bbcb27c83_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 359060071aa586b69b8c1b88ac7258dd726dff992e0d63f33499cc8a994c42df
- MD5 df8b9d6b56eb9c25b23ef62bbcb27c83
- SHA1 b4c2fd6d55da2d8a4cd4e0860340cb0bc1f78ec9
- SHA512 feee29b4a021a99e1ec84a5de9c35c73781acd8d76386038b395f7976b61651d2ba0fd9221105265b739ac3790a3bf0d6c40b05224f6b1746bed1188de25c5ec
- SSDEEP 196608:1ICMpYtB3JKc/3gBFWvU+ObhiJLmSd/ARAHBJ2lbqPhNphbl9v:lE4/QBFYL9HfPDR9
- TLSH T1BFA612C0F225F555E7600170882876A849662E303795D9ABBF8B7AD649782D3ECF1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE