General
- Target 2026-08-25_e468dc1430b864d4bdcbcacc5bf73f80_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260826-fl7b2sbf79
- SHA256 9f76ad876342a08be699fc457af9d223ab74f35532ec9ebdabb7e89c24bc6c6c
- MD5 e468dc1430b864d4bdcbcacc5bf73f80
- SHA1 955077011d397d46dabe09d158654976fe043292
- SHA512 8bc3792c5a572db75a848bec12ec2c67b0c319c60ddab2eca9cf03bbecb25893474cab76fd5ab6ed33add515bb70ed772de11c046d1b2d6c1fe7f4e61bb5aeb6
- SSDEEP 196608:QoriPCwZBCuMqsBX/lxM1WUFc2kiZWBQPgx2DQTs0LZsVlHl94:Qofw1RsBX9ewnicWPHU+PFS
- TLSH T160A612C0B3AAFA55EB18023151387BB8466621313B20C8EBBE9717D75D541C6AEF1E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_e468dc1430b864d4bdcbcacc5bf73f80_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_e468dc1430b864d4bdcbcacc5bf73f80_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_e468dc1430b864d4bdcbcacc5bf73f80_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 9f76ad876342a08be699fc457af9d223ab74f35532ec9ebdabb7e89c24bc6c6c
- MD5 e468dc1430b864d4bdcbcacc5bf73f80
- SHA1 955077011d397d46dabe09d158654976fe043292
- SHA512 8bc3792c5a572db75a848bec12ec2c67b0c319c60ddab2eca9cf03bbecb25893474cab76fd5ab6ed33add515bb70ed772de11c046d1b2d6c1fe7f4e61bb5aeb6
- SSDEEP 196608:QoriPCwZBCuMqsBX/lxM1WUFc2kiZWBQPgx2DQTs0LZsVlHl94:Qofw1RsBX9ewnicWPHU+PFS
- TLSH T160A612C0B3AAFA55EB18023151387BB8466621313B20C8EBBE9717D75D541C6AEF1E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE