General
- Target 2026-08-16_3ae56bb136b3da2ac3338e73927a897f_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- Sample260816-ncsraswxhs
- SHA256 342c2aa3b6e74267d1bc73be62d5baddda7ec04b5318caf48395e4a7da3aa985
- MD5 3ae56bb136b3da2ac3338e73927a897f
- SHA1 40958e8fd4142b109ef977a4799e268b0826ab3d
- SHA512 88c2126e8c8dbc78c14a027a03a15c7b62957cd61a7c6853ceaaa14c51afff81bd8a53f10a6cd4d19893c05e09762ecdb9c713b5636764c61a599cb38d085bb6
- SSDEEP 196608:WKySFzvuWiNy7LA9MMljbm6loEo6Eqxc7EUs3Vtg6FBl9a:ISxINELA97ljbRCGtUQVtnXk
- TLSH T1B8A612C0F265F258E7650171882436A845662D303B48D9ABBF8B76C699782D3EDF1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_3ae56bb136b3da2ac3338e73927a897f_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_3ae56bb136b3da2ac3338e73927a897f_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_3ae56bb136b3da2ac3338e73927a897f_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- SHA256 342c2aa3b6e74267d1bc73be62d5baddda7ec04b5318caf48395e4a7da3aa985
- MD5 3ae56bb136b3da2ac3338e73927a897f
- SHA1 40958e8fd4142b109ef977a4799e268b0826ab3d
- SHA512 88c2126e8c8dbc78c14a027a03a15c7b62957cd61a7c6853ceaaa14c51afff81bd8a53f10a6cd4d19893c05e09762ecdb9c713b5636764c61a599cb38d085bb6
- SSDEEP 196608:WKySFzvuWiNy7LA9MMljbm6loEo6Eqxc7EUs3Vtg6FBl9a:ISxINELA97ljbRCGtUQVtnXk
- TLSH T1B8A612C0F265F258E7650171882436A845662D303B48D9ABBF8B76C699782D3EDF1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE