General
- Target 2026-09-04_0803541ac19ecf1899a8aae9822e8831_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- Sample260905-xxtnrs1cjd
- SHA256 7bd32b18977b6f33ba387512ebcfe08a486fb57776f131bdf9c618c09462b4e8
- MD5 0803541ac19ecf1899a8aae9822e8831
- SHA1 cd093b78d22c570327f8aa47593ba5760a6a5120
- SHA512 2a0fe47b6e465cb14df2d8b87bb23b576197e890e38c6e9f1c9f8f633f700704cd5535f5dc7f19355224daa177ee6945693169dd02cb4f7b2351968195138531
- SSDEEP 196608:0BASPy5uSMwm+yRUWArXd1een5CJz5x/Cnd6oDLl9F:4hS/HYUWArNIy5CpydDhf
- TLSH T12FA612C0B265F55AE7550130882936A459662E303748D9EBBF8B7AC649782D3ECF1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_0803541ac19ecf1899a8aae9822e8831_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_0803541ac19ecf1899a8aae9822e8831_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_0803541ac19ecf1899a8aae9822e8831_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- SHA256 7bd32b18977b6f33ba387512ebcfe08a486fb57776f131bdf9c618c09462b4e8
- MD5 0803541ac19ecf1899a8aae9822e8831
- SHA1 cd093b78d22c570327f8aa47593ba5760a6a5120
- SHA512 2a0fe47b6e465cb14df2d8b87bb23b576197e890e38c6e9f1c9f8f633f700704cd5535f5dc7f19355224daa177ee6945693169dd02cb4f7b2351968195138531
- SSDEEP 196608:0BASPy5uSMwm+yRUWArXd1een5CJz5x/Cnd6oDLl9F:4hS/HYUWArNIy5CpydDhf
- TLSH T12FA612C0B265F55AE7550130882936A459662E303748D9EBBF8B7AC649782D3ECF1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE