General
- Target 2026-08-30_772aa5f5f316e364615cff385424fb87_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.4MB
- Sample260831-lh4pmsgm3s
- SHA256 ec3b196f49ee4dd57054d18d281fe19dac355f6e9a606cc8ee0023dc1f858ee6
- MD5 772aa5f5f316e364615cff385424fb87
- SHA1 389a2b95066070c4fd74405b3ac2eaf5d6dc0447
- SHA512 0c971c3306e208e17a9fca78d4d1e5888bc2147b88eda9216e946f8fd2e7d566fa5434f4081ce87341dc6cd34c352df567515167980a9dbfee5d3d996696b4ba
- SSDEEP 196608:nKENE/QpoBsVN84YdwCOR2BTp4I2xuYIa1YQnRWkNc6gXyFkhu:M/Qpo+P4ORs9D/a1YQQXLw9
- TLSH T1FFA62390B261F468E7A10530593873B4196A3A303715E9EBBF8B75C609391C2BEB5F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_772aa5f5f316e364615cff385424fb87_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_772aa5f5f316e364615cff385424fb87_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_772aa5f5f316e364615cff385424fb87_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.4MB
- SHA256 ec3b196f49ee4dd57054d18d281fe19dac355f6e9a606cc8ee0023dc1f858ee6
- MD5 772aa5f5f316e364615cff385424fb87
- SHA1 389a2b95066070c4fd74405b3ac2eaf5d6dc0447
- SHA512 0c971c3306e208e17a9fca78d4d1e5888bc2147b88eda9216e946f8fd2e7d566fa5434f4081ce87341dc6cd34c352df567515167980a9dbfee5d3d996696b4ba
- SSDEEP 196608:nKENE/QpoBsVN84YdwCOR2BTp4I2xuYIa1YQnRWkNc6gXyFkhu:M/Qpo+P4ORs9D/a1YQQXLw9
- TLSH T1FFA62390B261F468E7A10530593873B4196A3A303715E9EBBF8B75C609391C2BEB5F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.