2026-09-04_2714a247badff8109aa98ce2eaf2ffc2_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-04_2714a247badff8109aa98ce2eaf2ffc2_amadey_elex_luca-stealer_lynx_njrat
Size 1.4MB
Sample260905-thbb4avvgt
SHA256 2df91f32de40f57f3f6562db6941c46413b387ba94397807c210d628f7fd3d2e
MD5 2714a247badff8109aa98ce2eaf2ffc2
SHA1 b448ba50734a024d6f201755f3411c1fbdd10f63
SHA512 02f8d57e81dfae31c6b2e0f4958ca77e507248bb181e64e11be82a4c4eb364149d6da40fac2960058c8ebfbd76ddd77245553217a03edfdfa4f452d806252e59
SSDEEP 12288:dlF1obpU8O6uUAR7cxufCelhz6Pdi6dkXTccEkGhJcW+NtdaT/7hhv8Z:dlF1upU86b2KCelhz6lv2XoZL4ER5
TLSH
T1E4650102B580C071C4A265331A74EBB99A3D7D744FA55ACBA3E40D7FDB302C1EB35A5A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-04_2714a247badff8109aa98ce2eaf2ffc2_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-09-04_2714a247badff8109aa98ce2eaf2ffc2_amadey_elex_luca-stealer_lynx_njrat

.exe 1.4MB

2026-09-04_2714a247badff8109aa98ce2eaf2ffc2_amadey_elex_luca-stealer_lynx_njrat

IMPHASH c8ab36bbb3af1cb5f117b3a1b17a8312
SHA256 2df91f32de40f57f3f6562db6941c46413b387ba94397807c210d628f7fd3d2e
MD5 2714a247badff8109aa98ce2eaf2ffc2
SHA1 b448ba50734a024d6f201755f3411c1fbdd10f63
SHA512 02f8d57e81dfae31c6b2e0f4958ca77e507248bb181e64e11be82a4c4eb364149d6da40fac2960058c8ebfbd76ddd77245553217a03edfdfa4f452d806252e59
SSDEEP 12288:dlF1obpU8O6uUAR7cxufCelhz6Pdi6dkXTccEkGhJcW+NtdaT/7hhv8Z:dlF1upU86b2KCelhz6lv2XoZL4ER5
TLSH
T1E4650102B580C071C4A265331A74EBB99A3D7D744FA55ACBA3E40D7FDB302C1EB35A5A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

68063

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\TxGitCache\4128\third_party\bugly\build_crashpad\crashpad\out\x86\crashpad_handler_extension.pdb

dbgeng

DebugCreate

ole32

StringFromCLSID CoCreateGuid CoTaskMemFree

shlwapi

PathFileExistsW

kernel32

TerminateProcess HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW QueryDosDeviceW FindFirstVolumeW WriteFile CreateFileW GetLastError GetDiskFreeSpaceExW CloseHandle FindVolumeClose GetVolumePathNamesForVolumeNameW FindNextVolumeW ReadFile WritePrivateProfileStringW SwitchToThread GetProcAddress GetCurrentProcessId GetModuleHandleW GetCurrentThreadId SetLastError GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess WriteConsoleW IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RaiseException RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx FlushFileBuffers ReadConsoleW

user32

EnumWindows GetWindowThreadProcessId GetWindowTextW GetWindowLongW GetClassNameW EnumChildWindows

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-04_2714a247badff8109aa98ce2eaf2ffc2_amadey_elex_luca-stealer_lynx_njrat

dbgeng

ole32

shlwapi

kernel32

user32

generic