General
- Target 2026-08-30_e89c11d425ee2e21fb5e7e8ae393978c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.4MB
- Sample260831-b9jtfatbnf
- SHA256 d9f34c0c6aea67ab6dc21aa07f990a42f192de685e08fcf6df80a218706f3beb
- MD5 e89c11d425ee2e21fb5e7e8ae393978c
- SHA1 c1fa80d1031fccc4525849f16b04ba00d3a38066
- SHA512 cdcad9cbb0c229a953fb20adea36d9da954245dc4697bf6e978d238eb50ae270fa89bf300c891cbe684ee7cd38c1874d2d0b1f6a6174519d18e80c9f6f28f54e
- SSDEEP 196608:5BPGs6VipY7HcWXgi8aRvVf+Z/zbQXyFkhZ:uVH8Wb8aJVf+dbQwa
- TLSH T1C1A62390B211F459E76501314869B7B4196A29303355E8FFBF8B36D219782D3AEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_e89c11d425ee2e21fb5e7e8ae393978c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_e89c11d425ee2e21fb5e7e8ae393978c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_e89c11d425ee2e21fb5e7e8ae393978c_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.4MB
- SHA256 d9f34c0c6aea67ab6dc21aa07f990a42f192de685e08fcf6df80a218706f3beb
- MD5 e89c11d425ee2e21fb5e7e8ae393978c
- SHA1 c1fa80d1031fccc4525849f16b04ba00d3a38066
- SHA512 cdcad9cbb0c229a953fb20adea36d9da954245dc4697bf6e978d238eb50ae270fa89bf300c891cbe684ee7cd38c1874d2d0b1f6a6174519d18e80c9f6f28f54e
- SSDEEP 196608:5BPGs6VipY7HcWXgi8aRvVf+Z/zbQXyFkhZ:uVH8Wb8aJVf+dbQwa
- TLSH T1C1A62390B211F459E76501314869B7B4196A29303355E8FFBF8B36D219782D3AEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.