General
- Target 2026-08-06_51f88412d36b871d23cde2bf1450d1a1_amadey_elex_luca-stealer_lynx_njrat
- Size 3.4MB
- Sample260807-a49bgavarh
- SHA256 029ad33ee5bf28b4ec62546cee08f17c9843eb30ae3a616e2f0204c1611f3b3d
- MD5 51f88412d36b871d23cde2bf1450d1a1
- SHA1 0e3a7a34e2d27d159151e62231f87aa44f09396b
- SHA512 d125c8773b7c3b877c6395456fcac6b97f084793aa0ec14e821e220df77541055450460a591e373cdef1978772709039001457c14eb2af34c7827c9094c73516
- SSDEEP 98304:lkJyAyOzcsBMniOaV0NV5dUisBu/QBcBs:8gsBtkV5dNAduy
- TLSH T1A4F52252A3A1F8A1D9E115330A6671F1086EB959D5F4839F33DE0EBDBF60B009931B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_51f88412d36b871d23cde2bf1450d1a1_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_51f88412d36b871d23cde2bf1450d1a1_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Extracted
Credentials
-
Protocol
ftp
-
Host
framework.pcsoft.fr
-
Port
21
-
Username
framework
-
Password
framework
Targets
-
- Target 2026-08-06_51f88412d36b871d23cde2bf1450d1a1_amadey_elex_luca-stealer_lynx_njrat
- Size 3.4MB
- SHA256 029ad33ee5bf28b4ec62546cee08f17c9843eb30ae3a616e2f0204c1611f3b3d
- MD5 51f88412d36b871d23cde2bf1450d1a1
- SHA1 0e3a7a34e2d27d159151e62231f87aa44f09396b
- SHA512 d125c8773b7c3b877c6395456fcac6b97f084793aa0ec14e821e220df77541055450460a591e373cdef1978772709039001457c14eb2af34c7827c9094c73516
- SSDEEP 98304:lkJyAyOzcsBMniOaV0NV5dUisBu/QBcBs:8gsBtkV5dNAduy
- TLSH T1A4F52252A3A1F8A1D9E115330A6671F1086EB959D5F4839F33DE0EBDBF60B009931B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL