General
- Target 2026-08-27_e3db4c78c9c5dd59b12860844bfb15d4_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.4MB
- Sample260828-edjekssxa1
- SHA256 55b0408fdae5845554b59e4971a02b53746336001f38e577e151ca4c50bc7b7c
- MD5 e3db4c78c9c5dd59b12860844bfb15d4
- SHA1 073b7e0863034d76e058cdd3e916581f0965625e
- SHA512 6d25df9e168f92eff9fccb6f7d1a4f2ca9e022553d4295e43cd63f4f51bcd8c3ad26915769f189e482b7b11d4a146c35d7311f30a592a2548dc6a0768e352b99
- SSDEEP 196608:8oRHdmQxNnp/e7ISNb9uo9aydoQOla67aczsl7nJQSZXyFkhH:fEQxN1apj9ayqQOE6jOVNwc
- TLSH T1D7A62390B625F459E7A5013088247AA844676E303751DCEBFF8B3AD629781D3ADB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_e3db4c78c9c5dd59b12860844bfb15d4_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_e3db4c78c9c5dd59b12860844bfb15d4_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_e3db4c78c9c5dd59b12860844bfb15d4_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.4MB
- SHA256 55b0408fdae5845554b59e4971a02b53746336001f38e577e151ca4c50bc7b7c
- MD5 e3db4c78c9c5dd59b12860844bfb15d4
- SHA1 073b7e0863034d76e058cdd3e916581f0965625e
- SHA512 6d25df9e168f92eff9fccb6f7d1a4f2ca9e022553d4295e43cd63f4f51bcd8c3ad26915769f189e482b7b11d4a146c35d7311f30a592a2548dc6a0768e352b99
- SSDEEP 196608:8oRHdmQxNnp/e7ISNb9uo9aydoQOla67aczsl7nJQSZXyFkhH:fEQxN1apj9ayqQOE6jOVNwc
- TLSH T1D7A62390B625F459E7A5013088247AA844676E303751DCEBFF8B3AD629781D3ADB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.