General
- Target 2026-08-11_675e9892e8b29a4dd7e953af26556753_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260811-vkhdvsxckh
- SHA256 62b867542b7cb9f0dddd605726ed23cef7a3cb051b9439cca0e796158182999f
- MD5 675e9892e8b29a4dd7e953af26556753
- SHA1 aa830710c0ca70f6c1f30c882cbcd496b417fba1
- SHA512 5b9b2d56be342f9dae0c1a33af233770215cf5546a62cacfb3e6e16172e2e8102a06ec83274d988af4a454a7fb2f9e7670bba7ab695cd46159fc1e23bb7da7c0
- SSDEEP 196608:Ch6GUO2b52SA/KRi4hAuMPFUkKVEzDSMsgO+1HyPpnNl9F:m6GhyDA/qD6ZaXqsgO+1kpn7P
- TLSH T156A611D0B76AF625DF590231013876B8965725323B10C9EFBE970AC25D586C6AEF0E33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_675e9892e8b29a4dd7e953af26556753_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_675e9892e8b29a4dd7e953af26556753_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_675e9892e8b29a4dd7e953af26556753_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 62b867542b7cb9f0dddd605726ed23cef7a3cb051b9439cca0e796158182999f
- MD5 675e9892e8b29a4dd7e953af26556753
- SHA1 aa830710c0ca70f6c1f30c882cbcd496b417fba1
- SHA512 5b9b2d56be342f9dae0c1a33af233770215cf5546a62cacfb3e6e16172e2e8102a06ec83274d988af4a454a7fb2f9e7670bba7ab695cd46159fc1e23bb7da7c0
- SSDEEP 196608:Ch6GUO2b52SA/KRi4hAuMPFUkKVEzDSMsgO+1HyPpnNl9F:m6GhyDA/qD6ZaXqsgO+1kpn7P
- TLSH T156A611D0B76AF625DF590231013876B8965725323B10C9EFBE970AC25D586C6AEF0E33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE