2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat
Size 1.8MB
Sample260810-3gtaysbb87
SHA256 aef8640039e8c7f5aac6ed8de9d4e8931ad4e6b50ee1777f3ef7966c03b380c6
MD5 cf9edbf2cde7d04d92e84e516845b76d
SHA1 e01c7520a8c7aa3aedd1742e2e4f7b6f7dc48dae
SHA512 2d9607ca9d0c31d866ddc4e0665bfa2da2ab1573eafb0fefa7fbc5a2de50549a892abaf9c299d6ea14ce6f487e1ed761872469fbdf6811c13aa48af5268779b9
SSDEEP 24576:ewOddISY9A9Pu8hwg8zQPI9hAH8CzQgAqvuG:uddISY69PuQ8zQPm6YgA0uG
TLSH
T17C95E0E2B591C072C56603310D75FEBD1ABD6CF00A62C6AB2FD87A5EDF375809A31612
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat

.exe 1.8MB

2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat

IMPHASH d9bcf6609b2cc71b820e58777223d558
SHA256 aef8640039e8c7f5aac6ed8de9d4e8931ad4e6b50ee1777f3ef7966c03b380c6
MD5 cf9edbf2cde7d04d92e84e516845b76d
SHA1 e01c7520a8c7aa3aedd1742e2e4f7b6f7dc48dae
SHA512 2d9607ca9d0c31d866ddc4e0665bfa2da2ab1573eafb0fefa7fbc5a2de50549a892abaf9c299d6ea14ce6f487e1ed761872469fbdf6811c13aa48af5268779b9
SSDEEP 24576:ewOddISY9A9Pu8hwg8zQPI9hAH8CzQgAqvuG:uddISY69PuQ8zQPm6YgA0uG
TLSH
T17C95E0E2B591C072C56603310D75FEBD1ABD6CF00A62C6AB2FD87A5EDF375809A31612
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

156889

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Jenkins\workspace\BOP_agent_release_2.40.3\build\bin\win32-i386-vc143-release\Switcher.pdb

crypt32

CertGetNameStringW CertFreeCertificateContext CryptQueryObject CertFindCertificateInStore CertCloseStore CryptMsgGetParam CryptMsgClose

advapi32

RegGetValueW RegQueryValueExW RegOpenKeyExW OpenProcessToken ConvertStringSecurityDescriptorToSecurityDescriptorW AdjustTokenPrivileges DuplicateTokenEx GetTokenInformation SetTokenInformation LookupPrivilegeValueW CreateProcessWithTokenW CloseServiceHandle OpenSCManagerW OpenServiceW QueryServiceConfigW ConvertSidToStringSidW RegCloseKey

kernel32

LocalFree CreateDirectoryW CreateFileW GetDriveTypeW GetFileAttributesExW ReadFile SetFileAttributesW WriteFile LCMapStringW FileTimeToSystemTime DecodePointer InitializeCriticalSectionEx DeleteCriticalSection WaitForSingleObject GetCurrentProcessId TerminateProcess GetProcessId OpenProcess GetVersionExW CreateJobObjectW AssignProcessToJobObject SetInformationJobObject GetModuleFileNameW LocalAlloc GetProcAddress QueryFullProcessImageNameW CreateToolhelp32Snapshot Process32FirstW Process32NextW MultiByteToWideChar WideCharToMultiByte SetLastError HeapAlloc HeapFree ExitProcess HeapSize GetFileType SetStdHandle GetModuleHandleExW GetCommandLineA SystemTimeToTzSpecificLocalTime FindFirstFileExW GetFullPathNameW RtlUnwind RaiseException InitializeSListHead GetStartupInfoW IsProcessorFeaturePresent TlsFree GetCurrentProcess GetLastError CloseHandle CompareStringW GetModuleHandleW GetLocaleInfoW IsValidLocale QueryPerformanceFrequency GetUserDefaultLCID EnumSystemLocalesW GetConsoleOutputCP GetConsoleMode ReadConsoleW HeapReAlloc GetProcessHeap IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW TlsAlloc TlsGetValue MoveFileExW WriteConsoleW QueryPerformanceCounter SetUnhandledExceptionFilter GetSystemTimeAsFileTime GetTimeZoneInformation GetCurrentDirectoryW FindClose FindNextFileW GetFileAttributesW RemoveDirectoryW DeleteFileW FlushFileBuffers GetFileSizeEx SetEndOfFile SetFilePointerEx FreeLibrary LoadLibraryW GetCurrentThreadId ResumeThread GetStdHandle GetCommandLineW SetHandleInformation CreatePipe SetNamedPipeHandleState CreateProcessW ReleaseSRWLockExclusive AcquireSRWLockExclusive IsDebuggerPresent CreateActCtxW ActivateActCtx DeactivateActCtx SetEnvironmentVariableW LoadLibraryExW OutputDebugStringW InitializeSRWLock TryAcquireSRWLockExclusive WaitForSingleObjectEx EnterCriticalSection LeaveCriticalSection EncodePointer LCMapStringEx CompareStringEx GetCPInfo GetStringTypeW InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW UnhandledExceptionFilter TlsSetValue

shell32

ShellExecuteExW CommandLineToArgvW

user32

EnumThreadWindows IsWindowVisible GetWindowThreadProcessId GetWindow SetWindowTextW GetWindowTextW MessageBoxW EnumChildWindows ShowWindow GetShellWindow GetDesktopWindow

ole32

CoUninitialize CoSetProxyBlanket CoCreateInstance CoInitializeEx

oleaut32

VariantInit VariantChangeType SysFreeString SysAllocString VariantClear

wintrust

WinVerifyTrust

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_cf9edbf2cde7d04d92e84e516845b76d_akira_amadey_elex_luca-stealer_lynx_njrat

crypt32

advapi32

kernel32

shell32

user32

ole32

oleaut32

wintrust

generic