General
- Target 2026-08-30_e96279f6bc509b10fb71ccc62fb7d40b_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.5MB
- Sample260831-b7cx4sec82
- SHA256 361f1a9d4f7efac484370ae69aa9a13460b12542d18973723c28a288b60cc9de
- MD5 e96279f6bc509b10fb71ccc62fb7d40b
- SHA1 b761b555eda0ef55c80edc946d8b239aa0a39396
- SHA512 afaf7a69c03de5d6af6ac162045fcef9c9f379834674a70409191574601bc1fe6a9c0d5b09dac5e50e9fa7600640bb0ebd67c86e5eb2876b190b88dc9568accb
- SSDEEP 196608:bBVanBg6feoO0LnlUBkZ4ld0AVJvPkqwbANjXyFkhZ:aBgM0GZ48+JvPLQMwe
- TLSH T1CEA623D0F224F529DBA10130493876A4492A29303755D9EBBF8B3AE559382D3EDB1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_e96279f6bc509b10fb71ccc62fb7d40b_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_e96279f6bc509b10fb71ccc62fb7d40b_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_e96279f6bc509b10fb71ccc62fb7d40b_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.5MB
- SHA256 361f1a9d4f7efac484370ae69aa9a13460b12542d18973723c28a288b60cc9de
- MD5 e96279f6bc509b10fb71ccc62fb7d40b
- SHA1 b761b555eda0ef55c80edc946d8b239aa0a39396
- SHA512 afaf7a69c03de5d6af6ac162045fcef9c9f379834674a70409191574601bc1fe6a9c0d5b09dac5e50e9fa7600640bb0ebd67c86e5eb2876b190b88dc9568accb
- SSDEEP 196608:bBVanBg6feoO0LnlUBkZ4ld0AVJvPkqwbANjXyFkhZ:aBgM0GZ48+JvPLQMwe
- TLSH T1CEA623D0F224F529DBA10130493876A4492A29303755D9EBBF8B3AE559382D3EDB1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.