General
- Target 2026-09-08_6f298587c79f1d5cfda2fdba35e500e1_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 1.9MB
- Sample260908-tfrajage85
- SHA256 f8e4fde6d9c9c5d80e50c7fa4caff60ed1c614038f5441b7988da0ca1d2315e1
- MD5 6f298587c79f1d5cfda2fdba35e500e1
- SHA1 505227a05839a724e3e2df352cff6e4bf50d3d04
- SHA512 e576f881432567804c2770192f6db9dcaa0add82b2b5caeaf0f787ee60eee8c3f002979fdfa58cc7a4b7a63a3df6c1ccd86403c2313369b1f594ed5e4aade9ae
- SSDEEP 49152:JcABQwHqLgsQfkGsKGzKl++eRxCmGfGrdkjsl82ot4+Ej2EkCPRwqVfKnAX1tIc6:CLgFf12kjsl82ot4+Ej2EzD0Okc5g
- TLSH T1F595BE70F9808026DDD152F186AC7BA2446DE864073499D7E3C80FDEA6A47D26E32DF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_6f298587c79f1d5cfda2fdba35e500e1_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_6f298587c79f1d5cfda2fdba35e500e1_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 1.9MB
- SHA256 f8e4fde6d9c9c5d80e50c7fa4caff60ed1c614038f5441b7988da0ca1d2315e1
- MD5 6f298587c79f1d5cfda2fdba35e500e1
- SHA1 505227a05839a724e3e2df352cff6e4bf50d3d04
- SHA512 e576f881432567804c2770192f6db9dcaa0add82b2b5caeaf0f787ee60eee8c3f002979fdfa58cc7a4b7a63a3df6c1ccd86403c2313369b1f594ed5e4aade9ae
- SSDEEP 49152:JcABQwHqLgsQfkGsKGzKl++eRxCmGfGrdkjsl82ot4+Ej2EkCPRwqVfKnAX1tIc6:CLgFf12kjsl82ot4+Ej2EzD0Okc5g
- TLSH T1F595BE70F9808026DDD152F186AC7BA2446DE864073499D7E3C80FDEA6A47D26E32DF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1