General
- Target 2026-08-11_cfeddec1d33a4b48539323e698e53e1c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.9MB
- Sample260811-s7d9lsgp81
- SHA256 e78e98d6fc205c44e1e961c698ebc83b71249b642bef618c5b59c6c5d7ddee8c
- MD5 cfeddec1d33a4b48539323e698e53e1c
- SHA1 b0d6708ce64b305ad00814465be54d6bfccec9b8
- SHA512 983de0ae209fff49e198b3399af2b6644442c9e8c8902822bc91b9802241647b665197d70b5b2904b56ee5c65d8a31e97c2c94736a22b5838e6250fe9f6961a6
- SSDEEP 196608:3tS2uwvS9jaJgVwOrtA4DC/m97xDpQ4HGzGcZ9pbE8G/FfTBo6PjHUl9u:HaRaJg+J+XfmzGiA8ExTVTwc
- TLSH T1DEA612C0736AFA55DB59023144397AB8866721313B24D8FFBE871AD61C582C6AEF1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_cfeddec1d33a4b48539323e698e53e1c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_cfeddec1d33a4b48539323e698e53e1c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_cfeddec1d33a4b48539323e698e53e1c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.9MB
- SHA256 e78e98d6fc205c44e1e961c698ebc83b71249b642bef618c5b59c6c5d7ddee8c
- MD5 cfeddec1d33a4b48539323e698e53e1c
- SHA1 b0d6708ce64b305ad00814465be54d6bfccec9b8
- SHA512 983de0ae209fff49e198b3399af2b6644442c9e8c8902822bc91b9802241647b665197d70b5b2904b56ee5c65d8a31e97c2c94736a22b5838e6250fe9f6961a6
- SSDEEP 196608:3tS2uwvS9jaJgVwOrtA4DC/m97xDpQ4HGzGcZ9pbE8G/FfTBo6PjHUl9u:HaRaJg+J+XfmzGiA8ExTVTwc
- TLSH T1DEA612C0736AFA55DB59023144397AB8866721313B24D8FFBE871AD61C582C6AEF1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE