General
- Target 2026-08-13_93dc0c06e05e551b78781aff119bd911_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260813-wpfw9svsa1
- SHA256 8a655b0130838cde02efff61fa1dd6dc2d796623479d7b1194d0cb0f1e18b81f
- MD5 93dc0c06e05e551b78781aff119bd911
- SHA1 b8bd1bef9736ad5926c27aa0a9679bca7dbc1e2b
- SHA512 c76388ee937c015675a2d49828f74608045289c7e4a2bcd3e583c3049bfe9c5a009ca3d6761346cd27d483209cd4dd93b61be5cec1c31b475abd29ece097a466
- SSDEEP 196608:iyHacAnjd98cpfSYAdYjllou6ctXOWuGcfL8klprTwvDyj24KxUCl96:iy6cK8cphAytpiGcD8kltwLyj24Kx7o
- TLSH T112A612C07366FA59EB58027140387AF8856B21313721D9EBBE9B1BC71D581C6AEB1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_93dc0c06e05e551b78781aff119bd911_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_93dc0c06e05e551b78781aff119bd911_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_93dc0c06e05e551b78781aff119bd911_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 8a655b0130838cde02efff61fa1dd6dc2d796623479d7b1194d0cb0f1e18b81f
- MD5 93dc0c06e05e551b78781aff119bd911
- SHA1 b8bd1bef9736ad5926c27aa0a9679bca7dbc1e2b
- SHA512 c76388ee937c015675a2d49828f74608045289c7e4a2bcd3e583c3049bfe9c5a009ca3d6761346cd27d483209cd4dd93b61be5cec1c31b475abd29ece097a466
- SSDEEP 196608:iyHacAnjd98cpfSYAdYjllou6ctXOWuGcfL8klprTwvDyj24KxUCl96:iy6cK8cphAytpiGcD8kltwLyj24Kx7o
- TLSH T112A612C07366FA59EB58027140387AF8856B21313721D9EBBE9B1BC71D581C6AEB1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE