2026-08-20_71fc12692675a1499eb74a76ff4abefe_amadey_elex_luca-stealer_lynx_njrat

General

Target
2026-08-20_71fc12692675a1499eb74a76ff4abefe_amadey_elex_luca-stealer_lynx_njrat
Size 1.3MB
Sample260820-ppdctaxbjd
SHA256 0cf3f914abc2e9ccc2f0cf6e7aa54669a72a582c2597651dccc19ccea0d1fbd4
MD5 71fc12692675a1499eb74a76ff4abefe
SHA1 10d9451da299ed4fb3b77a956460544df4390978
SHA512 bffba69e41baf6b4bdf690b160aa7f5c9645ff5246926b1a1df0c23804be2956a915655d1226b0eecce095d5ddf69e77acb441bb585ef8bf7122bd81aca31bf1
SSDEEP 12288:4xPlfqhvwMQfgC8+g7FmsTL0v0vCHSwu91GPTUQ7MyQNkj+:41lShv3NC8LwsXYHU9MPxMu
TLSH
T118651221B1C19472D8F239329D60DBA55A3EFC345F50AEDB77841BBA4E705E08E2193E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_71fc12692675a1499eb74a76ff4abefe_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-20_71fc12692675a1499eb74a76ff4abefe_amadey_elex_luca-stealer_lynx_njrat

.exe 1.3MB

2026-08-20_71fc12692675a1499eb74a76ff4abefe_amadey_elex_luca-stealer_lynx_njrat

IMPHASH fd5dafd68c567878cada391f66c36ecb
SHA256 0cf3f914abc2e9ccc2f0cf6e7aa54669a72a582c2597651dccc19ccea0d1fbd4
MD5 71fc12692675a1499eb74a76ff4abefe
SHA1 10d9451da299ed4fb3b77a956460544df4390978
SHA512 bffba69e41baf6b4bdf690b160aa7f5c9645ff5246926b1a1df0c23804be2956a915655d1226b0eecce095d5ddf69e77acb441bb585ef8bf7122bd81aca31bf1
SSDEEP 12288:4xPlfqhvwMQfgC8+g7FmsTL0v0vCHSwu91GPTUQ7MyQNkj+:41lShv3NC8LwsXYHU9MPxMu
TLSH
T118651221B1C19472D8F239329D60DBA55A3EFC345F50AEDB77841BBA4E705E08E2193E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

15179

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitThread CreateToolhelp32Snapshot CreateEventW MultiByteToWideChar GetLastError Process32NextW SetEvent Process32FirstW UnmapViewOfFile CreateThread GetLocalTime LocalFree WideCharToMultiByte SetConsoleOutputCP CreateFileMappingW MapViewOfFile GetTickCount WriteConsoleW CloseHandle WaitForSingleObject ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc CreateFileW DecodePointer

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_71fc12692675a1499eb74a76ff4abefe_amadey_elex_luca-stealer_lynx_njrat

kernel32

advapi32

generic