General
- Target 2026-09-09_9bc106abdfe796fb10afc1c6cabd747a_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260909-sern8sfr2w
- SHA256 2ea3b536c5499c3baa2e2d63171a19352214cdcd1f11f2153149cd01ab6146a1
- MD5 9bc106abdfe796fb10afc1c6cabd747a
- SHA1 266a409eedd9e50d1e79bdb3be5aac59403784a1
- SHA512 b75521448e2b2bb8ff3d1476a9a7b67fc9d21b1bc48c5c0371f2ed3e526dc43f271b00f83c672f941457b1849933cb144310168a78cb7c86dfde2a48331b83cf
- SSDEEP 196608:O351SmVxBLTA7JJUVoFRt3muv2kokE80VpfXw0T3l93:O3Hx/k7UWFRt2vkbJUpfAmx
- TLSH T1BAA612C073A6F656EB1902314038B6F9462665323B10D9EBBF9726CB1D581C2EEB1D73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_9bc106abdfe796fb10afc1c6cabd747a_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_9bc106abdfe796fb10afc1c6cabd747a_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_9bc106abdfe796fb10afc1c6cabd747a_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 2ea3b536c5499c3baa2e2d63171a19352214cdcd1f11f2153149cd01ab6146a1
- MD5 9bc106abdfe796fb10afc1c6cabd747a
- SHA1 266a409eedd9e50d1e79bdb3be5aac59403784a1
- SHA512 b75521448e2b2bb8ff3d1476a9a7b67fc9d21b1bc48c5c0371f2ed3e526dc43f271b00f83c672f941457b1849933cb144310168a78cb7c86dfde2a48331b83cf
- SSDEEP 196608:O351SmVxBLTA7JJUVoFRt3muv2kokE80VpfXw0T3l93:O3Hx/k7UWFRt2vkbJUpfAmx
- TLSH T1BAA612C073A6F656EB1902314038B6F9462665323B10D9EBBF9726CB1D581C2EEB1D73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE