General
- Target 2026-08-09_7577749b4ffaa91ef963c6fa010ef297_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- Sample260809-rjls4sag63
- SHA256 a051bac35d873ba985884264fae889f4759d5b02d699b7767cc74c767557af19
- MD5 7577749b4ffaa91ef963c6fa010ef297
- SHA1 49f03c02240dd550aab97e9e2f8c2c557b6f4b22
- SHA512 094206394e3a174131a700615a3561327bdde669493a2f2eb13169a172b1d9b2c292a1d3cac83d6d67e79aaa651091c23249114c3b40e767032766df141902d8
- SSDEEP 196608:1q5UViTPy9Zsk/w/k5NeBIJiG19VWBiKFVVrc79NwPgb3zgkl9A:1qEiTP+G5c58qxKcQrc44bDggK
- TLSH T10BA61280F225F619E7A50130882876A459661E303758D9ABFF8F3AD659381D3EDB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_7577749b4ffaa91ef963c6fa010ef297_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_7577749b4ffaa91ef963c6fa010ef297_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_7577749b4ffaa91ef963c6fa010ef297_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- SHA256 a051bac35d873ba985884264fae889f4759d5b02d699b7767cc74c767557af19
- MD5 7577749b4ffaa91ef963c6fa010ef297
- SHA1 49f03c02240dd550aab97e9e2f8c2c557b6f4b22
- SHA512 094206394e3a174131a700615a3561327bdde669493a2f2eb13169a172b1d9b2c292a1d3cac83d6d67e79aaa651091c23249114c3b40e767032766df141902d8
- SSDEEP 196608:1q5UViTPy9Zsk/w/k5NeBIJiG19VWBiKFVVrc79NwPgb3zgkl9A:1qEiTP+G5c58qxKcQrc44bDggK
- TLSH T10BA61280F225F619E7A50130882876A459661E303758D9ABFF8F3AD659381D3EDB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE