General
- Target 2026-08-04_2b97ab839a1f8e753ec2ab3d3212d587_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- Sample260804-zly58aej2v
- SHA256 920faa08b9f73e1c3e66628805911ff48d8a4c529acb2194ab356511d42404de
- MD5 2b97ab839a1f8e753ec2ab3d3212d587
- SHA1 2534309a6a12813df4faf431e0e09c943d308f70
- SHA512 2ca9570239e71de0658c6498f67b482cc7f74c1612a79aa0e6ffdf2f839fce63cdf7a81731ff2795d2b6dc6c81947e3faf48777ae03cf49ce63e762b6c8cd82a
- SSDEEP 196608:BSb0skuTvacd69vaoH/DduLw9OMjSLIIeJEtG0KSPRfFtl91:IoiicdoHZuLfTleWRbP
- TLSH T16EA611C0F324F918E7950130983936A859662A303744E8ABFF8B76D559782D3ADB1F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_2b97ab839a1f8e753ec2ab3d3212d587_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_2b97ab839a1f8e753ec2ab3d3212d587_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_2b97ab839a1f8e753ec2ab3d3212d587_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- SHA256 920faa08b9f73e1c3e66628805911ff48d8a4c529acb2194ab356511d42404de
- MD5 2b97ab839a1f8e753ec2ab3d3212d587
- SHA1 2534309a6a12813df4faf431e0e09c943d308f70
- SHA512 2ca9570239e71de0658c6498f67b482cc7f74c1612a79aa0e6ffdf2f839fce63cdf7a81731ff2795d2b6dc6c81947e3faf48777ae03cf49ce63e762b6c8cd82a
- SSDEEP 196608:BSb0skuTvacd69vaoH/DduLw9OMjSLIIeJEtG0KSPRfFtl91:IoiicdoHZuLfTleWRbP
- TLSH T16EA611C0F324F918E7950130983936A859662A303744E8ABFF8B76D559782D3ADB1F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE