2026-08-20_75698f0524aa88b5059e394f194cf2ca_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

General

Target
2026-08-20_75698f0524aa88b5059e394f194cf2ca_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
Size 1.9MB
Sample260820-spccasen3t
SHA256 9d50b69a9775daae3113854ea32638a865a080fa1dbd822efaee068fcc1512e7
MD5 75698f0524aa88b5059e394f194cf2ca
SHA1 d044b898dd3fd07b1845cb7988342c38e2a33ce5
SHA512 e61ed34e954d761e008e9dd7edcc42c6a77597a9b06a12d7a2c80f3865cde9719bf7e6cfc9af7868a9ed79dd4c905ac54a7a68fc21a7124511eb97f4360797a1
SSDEEP 49152:fTyBkiW7Y0rvHIVSJ0Sky7lPJ8V1B3lK+Eh:eBkh75OSTU3l
TLSH
T13C95C0307E808122EDF320B689FDB539852C94701B1955D7A2C81BFEE6656E23F36E53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_75698f0524aa88b5059e394f194cf2ca_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-08-20_75698f0524aa88b5059e394f194cf2ca_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 1.9MB

2026-08-20_75698f0524aa88b5059e394f194cf2ca_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 8965538112feacd3d47ecf01af21be5b
SHA256 9d50b69a9775daae3113854ea32638a865a080fa1dbd822efaee068fcc1512e7
MD5 75698f0524aa88b5059e394f194cf2ca
SHA1 d044b898dd3fd07b1845cb7988342c38e2a33ce5
SHA512 e61ed34e954d761e008e9dd7edcc42c6a77597a9b06a12d7a2c80f3865cde9719bf7e6cfc9af7868a9ed79dd4c905ac54a7a68fc21a7124511eb97f4360797a1
SSDEEP 49152:fTyBkiW7Y0rvHIVSJ0Sky7lPJ8V1B3lK+Eh:eBkh75OSTU3l
TLSH
T13C95C0307E808122EDF320B689FDB539852C94701B1955D7A2C81BFEE6656E23F36E53
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Rockchip\vs_projects\upgrade_tool\upgrade_tool.pdb

setupapi

SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiGetClassDevsA CM_Locate_DevNodeA CM_Get_Sibling CM_Get_Parent CM_Get_DevNode_Registry_PropertyA CM_Get_Device_IDA CM_Get_Child SetupDiGetDeviceRegistryPropertyA SetupDiDestroyDeviceInfoList

shell32

CommandLineToArgvW

kernel32

TerminateProcess HeapSize CreateFileW FlushFileBuffers SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GetStdHandle CreateDirectoryA FindFirstFileA GetFileAttributesA Sleep GetModuleFileNameA LocalFree CopyFileA MultiByteToWideChar WideCharToMultiByte FillConsoleOutputCharacterA FillConsoleOutputAttribute GetConsoleScreenBufferInfo SetConsoleCursorPosition SetConsoleTextAttribute ScrollConsoleScreenBufferA CreateFileA ReadFile WriteFile CloseHandle GetLastError DeviceIoControl GetDriveTypeA GetLogicalDrives SetFilePointer FreeLibrary GetProcAddress LoadLibraryA GlobalAlloc GlobalFree ReleaseMutex WaitForSingleObject CreateMutexA OpenMutexA FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess SetEndOfFile IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead FindClose RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess GetCommandLineA GetCommandLineW GetCurrentThread HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleMode ReadConsoleW SetFilePointerEx GetConsoleOutputCP GetFileSizeEx OutputDebugStringW SetConsoleCtrlHandler GetTimeZoneInformation HeapReAlloc

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

182KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

600KB

Virtual Size

604KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_75698f0524aa88b5059e394f194cf2ca_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

setupapi

shell32

kernel32

generic