General
- Target 2026-08-25_ff681903bd10065fbeb613f432932fb6_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260825-3s8vsaxtex
- SHA256 a2e1e4c4f2c9fa630a9cf896cd73bad67148b08f3dfdc0801823b52921ebaa4e
- MD5 ff681903bd10065fbeb613f432932fb6
- SHA1 3d6acd2c40b4e617ab7f54cb246ba2c54dc1c6cb
- SHA512 b83d8567381f467e77dac70e3f2e583be7de2d60a4f374e031040dc934b7fe09fb707e947e5dd2f278ef09643ba5745c27dfad5b17ce635d4fb04535b98251c4
- SSDEEP 196608:zSczpyrl6pv/AWgq73aoDLCPxQiPcJdksfelOn9FIebLHl9Z:mqpYo5AWpFDLCPxz0S89FIePFz
- TLSH T15AA612D0736AFA15EB59023101357AF8466721323B15C9EBBE9B1BC75D582C2AEB0D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_ff681903bd10065fbeb613f432932fb6_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_ff681903bd10065fbeb613f432932fb6_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_ff681903bd10065fbeb613f432932fb6_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 a2e1e4c4f2c9fa630a9cf896cd73bad67148b08f3dfdc0801823b52921ebaa4e
- MD5 ff681903bd10065fbeb613f432932fb6
- SHA1 3d6acd2c40b4e617ab7f54cb246ba2c54dc1c6cb
- SHA512 b83d8567381f467e77dac70e3f2e583be7de2d60a4f374e031040dc934b7fe09fb707e947e5dd2f278ef09643ba5745c27dfad5b17ce635d4fb04535b98251c4
- SSDEEP 196608:zSczpyrl6pv/AWgq73aoDLCPxQiPcJdksfelOn9FIebLHl9Z:mqpYo5AWpFDLCPxz0S89FIePFz
- TLSH T15AA612D0736AFA15EB59023101357AF8466721323B15C9EBBE9B1BC75D582C2AEB0D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE