General
- Target 2026-08-17_ca66bc072865467ca61b81f456590cff_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- Sample260817-wqvrtafl31
- SHA256 07b6033683fba3e2d21607e8246467035c245e3a498abdb15bf9766f6f048ef1
- MD5 ca66bc072865467ca61b81f456590cff
- SHA1 a160dadb0a812691c3145d2d8ec43679b054219a
- SHA512 ab810434fccb9f7bae363e6865a0679b1c2761ff0057e96fd8d4cd6187fbf8de60ae0b5825f0cbfd8a1a3bf970afad5a9946ed64da4949b56642a807f1991ed0
- SSDEEP 196608:1hVlt3u6sTvgimrcezjobOSqwmu/9T+Vfg2HPTK6drwzVnk7cTpul9C:1hVltJsZmrr86Sqw39Eg2HP2uk1rpiE
- TLSH T1BFA612C073A6FA15DB5802724038BBF8851661313B15D9EBBE9B27D71D582C2AEB0D73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_ca66bc072865467ca61b81f456590cff_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_ca66bc072865467ca61b81f456590cff_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_ca66bc072865467ca61b81f456590cff_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- SHA256 07b6033683fba3e2d21607e8246467035c245e3a498abdb15bf9766f6f048ef1
- MD5 ca66bc072865467ca61b81f456590cff
- SHA1 a160dadb0a812691c3145d2d8ec43679b054219a
- SHA512 ab810434fccb9f7bae363e6865a0679b1c2761ff0057e96fd8d4cd6187fbf8de60ae0b5825f0cbfd8a1a3bf970afad5a9946ed64da4949b56642a807f1991ed0
- SSDEEP 196608:1hVlt3u6sTvgimrcezjobOSqwmu/9T+Vfg2HPTK6drwzVnk7cTpul9C:1hVltJsZmrr86Sqw39Eg2HP2uk1rpiE
- TLSH T1BFA612C073A6FA15DB5802724038BBF8851661313B15D9EBBE9B27D71D582C2AEB0D73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE