2026-08-08_0f2e36a41c946c3de6e68ec7001664a1_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_0f2e36a41c946c3de6e68ec7001664a1_amadey_elex_luca-stealer_lynx_njrat
Size 1.7MB
Sample260808-p2sy2ade77
SHA256 5a10104806a847b845ee4c278fefc40c42f2ba1aea396eb05c93feedb9ef12cb
MD5 0f2e36a41c946c3de6e68ec7001664a1
SHA1 57e2628a07437859ab620c39fe686ca378ba4352
SHA512 0e052f962a9c17574c78a559051686f3d5ac1e4d151d6a63dd14bd1687298fde4d67ce92f0510370c30eb284898baaa8cee9226bd938ca806dc878022c174ae5
SSDEEP 24576:Kj+AuNedmeL79ft9rAutNCirDNIo++/Foacs:GdmeL7lvtNZDNV++/9cs
TLSH
T14E85CF11B6C08131E6B3393016B9A2710E7F7C606D38968F638C593D5FB29D1E939B6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_0f2e36a41c946c3de6e68ec7001664a1_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-08_0f2e36a41c946c3de6e68ec7001664a1_amadey_elex_luca-stealer_lynx_njrat

.exe 1.7MB

2026-08-08_0f2e36a41c946c3de6e68ec7001664a1_amadey_elex_luca-stealer_lynx_njrat

IMPHASH 7262bf22fccb8afcc8a7c7f8482ebae4
SHA256 5a10104806a847b845ee4c278fefc40c42f2ba1aea396eb05c93feedb9ef12cb
MD5 0f2e36a41c946c3de6e68ec7001664a1
SHA1 57e2628a07437859ab620c39fe686ca378ba4352
SHA512 0e052f962a9c17574c78a559051686f3d5ac1e4d151d6a63dd14bd1687298fde4d67ce92f0510370c30eb284898baaa8cee9226bd938ca806dc878022c174ae5
SSDEEP 24576:Kj+AuNedmeL79ft9rAutNCirDNIo++/Foacs:GdmeL7lvtNZDNV++/9cs
TLSH
T14E85CF11B6C08131E6B3393016B9A2710E7F7C606D38968F638C593D5FB29D1E939B6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27883

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Work\Codes\Windows-driver-samples\setup\devcon\RELEASE\devcon.pdb

kernel32

LocalFree FormatMessageW FileTimeToSystemTime GetCurrentProcess WriteConsoleW CreateFileW ReadConsoleW ReadFile CloseHandle LoadLibraryW GetProcAddress FreeLibrary GetWindowsDirectoryW GetLastError GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW GetDateFormatW FindClose HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleCP FlushFileBuffers SetConsoleCtrlHandler GetProcessHeap GetStringTypeW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW OutputDebugStringW SetStdHandle GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW HeapFree HeapAlloc GetCurrentThread GetCommandLineW GetCommandLineA GetModuleHandleExW ExitProcess GetModuleFileNameW WriteFile GetStdHandle EncodePointer LoadLibraryExW TlsFree TlsSetValue TlsGetValue DecodePointer TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedPushEntrySList InterlockedFlushSList RaiseException RtlUnwind SetLastError EnterCriticalSection

user32

CharNextW LoadStringW

advapi32

InitiateSystemShutdownExW RegQueryValueExW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken OpenServiceW OpenSCManagerW CloseServiceHandle RegSetValueExW RegDeleteValueW RegCloseKey

ole32

CLSIDFromString

setupapi

CM_Get_Next_Res_Des_Ex CM_Get_Res_Des_Data_Size_Ex CM_Get_Res_Des_Data_Ex CM_Free_Res_Des_Handle CM_Free_Log_Conf_Handle SetupDiGetDriverInstallParamsW SetupDiSetDeviceInstallParamsW SetupDiOpenDevRegKey SetupDiDestroyDriverInfoList SetupDiGetDriverInfoDetailW SetupDiSetSelectedDriverW SetupDiEnumDriverInfoW SetupDiBuildDriverInfoList SetupScanFileQueueW SetupCloseFileQueue SetupOpenFileQueue SetupGetStringFieldW SetupFindFirstLineW SetupCloseInfFile SetupOpenInfFileW SetupDiGetDeviceRegistryPropertyW SetupDiOpenDeviceInfoW SetupDiCreateDeviceInfoListExW CM_Reenumerate_DevNode_Ex CM_Locate_DevNode_ExW CM_Get_DevNode_Status_Ex CM_Get_First_Log_Conf_Ex CM_Disconnect_Machine CM_Connect_MachineW SetupDiClassGuidsFromNameExW SetupDiClassNameFromGuidExW SetupDiSetClassInstallParamsW SetupDiGetDeviceInstallParamsW SetupDiSetDeviceRegistryPropertyW SetupDiOpenClassRegKeyExW SetupDiCallClassInstaller SetupDiGetClassDescriptionExW SetupDiBuildClassInfoListExW SetupDiGetINFClassW SetupDiGetClassDevsExW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiCreateDeviceInfoW SetupDiGetDeviceInfoListDetailW SetupDiCreateDeviceInfoList SetupCopyOEMInfW CM_Get_Device_ID_ExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_0f2e36a41c946c3de6e68ec7001664a1_amadey_elex_luca-stealer_lynx_njrat

kernel32

user32

advapi32

ole32

setupapi

generic