General
- Target 2026-08-09_8291ecf3b3fecf4ab9ec5ba1f9862acd_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.9MB
- Sample260809-tyt45s1hlc
- SHA256 19bc0b6a37685a71dcac169f7a30301a733e148c758afbee7f6da7590fd0f228
- MD5 8291ecf3b3fecf4ab9ec5ba1f9862acd
- SHA1 5861ddcd77ebbcb0e5bebdff8c2c5efe31486ecc
- SHA512 c2f4306d9d317cf227b9722c442ee6bbdf0b918e6c7b4f9536d9dff0814ed23ae41656e3e9d3ace1e1dd1b95e8ad966259978eb4afb9027ceda0eb11f7292d16
- SSDEEP 196608:pHlkBro8wMmRt0+uSmGTcZPu09YmW34Wp0O1smBHJaEBNxv5Al95:p+Syg0vW9WaHJaE/LkX
- TLSH T151A612C07366FA55EB5902310039BAB8866721353B20D9EBBED716C35D582C6AEF1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_8291ecf3b3fecf4ab9ec5ba1f9862acd_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_8291ecf3b3fecf4ab9ec5ba1f9862acd_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_8291ecf3b3fecf4ab9ec5ba1f9862acd_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.9MB
- SHA256 19bc0b6a37685a71dcac169f7a30301a733e148c758afbee7f6da7590fd0f228
- MD5 8291ecf3b3fecf4ab9ec5ba1f9862acd
- SHA1 5861ddcd77ebbcb0e5bebdff8c2c5efe31486ecc
- SHA512 c2f4306d9d317cf227b9722c442ee6bbdf0b918e6c7b4f9536d9dff0814ed23ae41656e3e9d3ace1e1dd1b95e8ad966259978eb4afb9027ceda0eb11f7292d16
- SSDEEP 196608:pHlkBro8wMmRt0+uSmGTcZPu09YmW34Wp0O1smBHJaEBNxv5Al95:p+Syg0vW9WaHJaE/LkX
- TLSH T151A612C07366FA55EB5902310039BAB8866721353B20D9EBBED716C35D582C6AEF1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE