General
- Target 2026-08-09_154b0938251792db54bd794abc2a3bdc_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.9MB
- Sample260809-vqsrsavyhy
- SHA256 88c960f184db145b212215aaa46a61f3d0c7ad17745c040588a5e66a3bf4a207
- MD5 154b0938251792db54bd794abc2a3bdc
- SHA1 96099be2c9d086a154a00395243666ff17a41141
- SHA512 6a6c8d50674d363829f7bb62418dcf7ecb6c045df0d03a86de8c5d02be4eaa5c9966f45b15e94bdcf296d5c19c64aec513922d5013112954ca68b8af83b2bddd
- SSDEEP 196608:MOLyYzurUi8g9Rg9u3fXaHwCy4XJJAnMiTKkySG/CfeFMn+Gio4wssl9f:1uMBhJJHiH9OCft+G54ws4Z
- TLSH T15CA612D07366F629EF59023101397AB8556B22323B15C9EBBE9706C35D582C2ADF1E33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_154b0938251792db54bd794abc2a3bdc_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_154b0938251792db54bd794abc2a3bdc_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_154b0938251792db54bd794abc2a3bdc_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.9MB
- SHA256 88c960f184db145b212215aaa46a61f3d0c7ad17745c040588a5e66a3bf4a207
- MD5 154b0938251792db54bd794abc2a3bdc
- SHA1 96099be2c9d086a154a00395243666ff17a41141
- SHA512 6a6c8d50674d363829f7bb62418dcf7ecb6c045df0d03a86de8c5d02be4eaa5c9966f45b15e94bdcf296d5c19c64aec513922d5013112954ca68b8af83b2bddd
- SSDEEP 196608:MOLyYzurUi8g9Rg9u3fXaHwCy4XJJAnMiTKkySG/CfeFMn+Gio4wssl9f:1uMBhJJHiH9OCft+G54ws4Z
- TLSH T15CA612D07366F629EF59023101397AB8556B22323B15C9EBBE9706C35D582C2ADF1E33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE