2026-08-21_0f0c5769440603ae9067f322eb1b1197_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-21_0f0c5769440603ae9067f322eb1b1197_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
Size 4.8MB
Sample260822-xrtftaybna
SHA256 a06d56a296116244984860cf2c412dc4225aae2e6553b1ee58f56ce32cf8763a
MD5 0f0c5769440603ae9067f322eb1b1197
SHA1 27311cb3a84959787e322e93deacda328ed86f3f
SHA512 7454ad26f1de117677b6b0d202807302bac36d8e13342adac038256b100177c6cb2b75166c41f5e74314f8bb77277e7ff8b3e15bf55943435f7853bfadcb9fb7
SSDEEP 12288:z7q7l6pkq/kW8WGnxRrn6HvGOQrqhsfkVrgkIQuRn+huM5mv4aGhU+2V65AF:K7l6pkq/kW8WG7rn6H4+hkMrn2vd6
TLSH
T10B36AE3179C28172EDE330B646ECB63642ADE4B407151ADB46D81BFED7606C2AF325D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_0f0c5769440603ae9067f322eb1b1197_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader

File Explorer

2026-08-21_0f0c5769440603ae9067f322eb1b1197_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader

.exe 4.8MB

2026-08-21_0f0c5769440603ae9067f322eb1b1197_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader

IMPHASH 4e56c5a0933590e2f4c1321a628109f2
SHA256 a06d56a296116244984860cf2c412dc4225aae2e6553b1ee58f56ce32cf8763a
MD5 0f0c5769440603ae9067f322eb1b1197
SHA1 27311cb3a84959787e322e93deacda328ed86f3f
SHA512 7454ad26f1de117677b6b0d202807302bac36d8e13342adac038256b100177c6cb2b75166c41f5e74314f8bb77277e7ff8b3e15bf55943435f7853bfadcb9fb7
SSDEEP 12288:z7q7l6pkq/kW8WGnxRrn6HvGOQrqhsfkVrgkIQuRn+huM5mv4aGhU+2V65AF:K7l6pkq/kW8WG7rn6H4+hkMrn2vd6
TLSH
T10B36AE3179C28172EDE330B646ECB63642ADE4B407151ADB46D81BFED7606C2AF325D2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

332236

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW FormatMessageA WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection LocalFree GetLocaleInfoEx EncodePointer DecodePointer LCMapStringEx CompareStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetCurrentThread HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc SetConsoleCtrlHandler GetTimeZoneInformation OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap ReadConsoleW HeapSize WriteConsoleW

Name

.textbss

Size

Virtual Size

316KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

707KB

Virtual Size

707KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

99KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

172KB

Virtual Size

179KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.Scorpy

Size

99KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.Scorpy

Size

99KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_0f0c5769440603ae9067f322eb1b1197_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader

kernel32

generic