2026-09-09_de874c404b514a74bbf4425ec7f4e6b9_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-09_de874c404b514a74bbf4425ec7f4e6b9_amadey_elex_luca-stealer_lynx_njrat
Size 7.4MB
Sample260910-2kb1eayzcs
SHA256 bd0209be8d74936819c8046d94c3af6edd96163a68ad1f9c84cd5b6ae13832d9
MD5 de874c404b514a74bbf4425ec7f4e6b9
SHA1 77e4855186fa67673d02ce90dad6d6d277c416df
SHA512 bd86063298efc75b023968c76626bc92273ee97aef7d7e56f8ebd28bd7e52331afec83ea44d8e6f5f83ea5f7c416fb5814c6a5abb0b1500c3f0fcc8d79df3a49
SSDEEP 196608:r8yF/f/S/S9N/gBEnAYV4JpbF4V0a/GeQq+5jn2:r8sHS/SYBEnAq4zbF4ijeQqyj2
TLSH
T1AC7601C17650F822C34A01714D35BBF8862A66303714E5E7FF8F3AD65A685C5EEB0A36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-09_de874c404b514a74bbf4425ec7f4e6b9_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-09-09_de874c404b514a74bbf4425ec7f4e6b9_amadey_elex_luca-stealer_lynx_njrat

.exe 7.4MB

2026-09-09_de874c404b514a74bbf4425ec7f4e6b9_amadey_elex_luca-stealer_lynx_njrat

IMPHASH 8d36d4792d9c9f7dbb9c70708ec83ca9
SHA256 bd0209be8d74936819c8046d94c3af6edd96163a68ad1f9c84cd5b6ae13832d9
MD5 de874c404b514a74bbf4425ec7f4e6b9
SHA1 77e4855186fa67673d02ce90dad6d6d277c416df
SHA512 bd86063298efc75b023968c76626bc92273ee97aef7d7e56f8ebd28bd7e52331afec83ea44d8e6f5f83ea5f7c416fb5814c6a5abb0b1500c3f0fcc8d79df3a49
SSDEEP 196608:r8yF/f/S/S9N/gBEnAYV4JpbF4V0a/GeQq+5jn2:r8sHS/SYBEnAq4zbF4ijeQqyj2
TLSH
T1AC7601C17650F822C34A01714D35BBF8862A66303714E5E7FF8F3AD65A685C5EEB0A36
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\NNRus.git\CppDownloader.SCB\Plugins\7ZipDownloader\Output\SFXWin.pdb

kernel32

VirtualProtect VirtualFree FreeLibrary GetProcAddress LoadLibraryA lstrlenA IsBadReadPtr GetThreadLocale EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CompareFileTime Sleep WaitForMultipleObjects GetCurrentProcess SetPriorityClass GetTickCount GetStdHandle GetFileInformationByHandle ReadFile WriteFile GetModuleHandleW GlobalUnlock GlobalLock GetModuleFileNameA GetModuleFileNameW LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree FormatMessageA FormatMessageW SetCurrentDirectoryA SetCurrentDirectoryW GetCurrentDirectoryA GetCurrentDirectoryW CreateDirectoryA CreateDirectoryW CreateFileW DeleteFileA DeleteFileW RemoveDirectoryA RemoveDirectoryW SetFileAttributesA SetFileAttributesW SetFileTime GetTempPathW GetTempPathA CloseHandle SetLastError GetCurrentProcessId GetCurrentThreadId GetSystemDirectoryA GetSystemDirectoryW GetWindowsDirectoryA GetWindowsDirectoryW MoveFileA MoveFileW CreateHardLinkW FindClose FindCloseChangeNotification FindFirstChangeNotificationA FindFirstChangeNotificationW FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW GetFileAttributesA GetFileAttributesW GetLogicalDriveStringsW GetModuleHandleA GetLogicalDriveStringsA CreateFileA GetFileSize SetEndOfFile SetFilePointer GlobalAlloc GlobalReAlloc GlobalFree FileTimeToLocalFileTime FileTimeToSystemTime VirtualAlloc GetSystemInfo GlobalMemoryStatus GetProcessAffinityMask GetSystemTimeAsFileTime FileTimeToDosDateTime DosDateTimeToFileTime AreFileApisANSI MultiByteToWideChar WideCharToMultiByte IsProcessorFeaturePresent GetVersion InitializeCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventA ResumeThread SetThreadAffinityMask CreateSemaphoreA GetVersionExA ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapSize GetTimeZoneInformation SetStdHandle OutputDebugStringW SetConsoleCtrlHandler GetFileType SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP WriteConsoleW IsValidCodePage FindFirstFileExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapReAlloc GetCurrentThread ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RtlUnwind RaiseException GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer GetLocaleInfoEx InitializeCriticalSectionEx GetStringTypeW InitializeSListHead QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent TerminateProcess SetUnhandledExceptionFilter GetNativeSystemInfo GetProcessHeap HeapFree HeapAlloc GlobalSize GetLastError UnhandledExceptionFilter

user32

PostMessageA SendMessageA CharPrevExA ShowWindow MoveWindow EndDialog GetDlgItem CharUpperW CharUpperA GetWindowTextLengthW GetWindowTextLengthA GetWindowTextW GetWindowTextA SetWindowTextW SetWindowTextA CreateWindowExW RegisterClassW RegisterClassA RegisterClipboardFormatA LoadStringW LoadStringA IsClipboardFormatAvailable EmptyClipboard SetClipboardData CloseClipboard OpenClipboard SetWindowLongW CreateWindowExA CallWindowProcW CallWindowProcA GetMonitorInfoA MonitorFromWindow SystemParametersInfoA MapDialogRect SetWindowLongA GetWindowLongA GetDialogBaseUnits DialogBoxParamW DialogBoxParamA CreateDialogParamW CreateDialogParamA SendMessageW LoadIconA LoadCursorA GetParent SetCursor SetTimer IsDlgButtonChecked CheckDlgButton ScreenToClient GetWindowRect MessageBoxW InvalidateRect EnableWindow GetKeyState GetFocus SetFocus KillTimer

comdlg32

GetSaveFileNameA GetOpenFileNameW GetOpenFileNameA CommDlgExtendedError GetSaveFileNameW

shell32

SHBrowseForFolderA SHGetFileInfoA SHGetPathFromIDListA SHGetSpecialFolderLocation SHGetDesktopFolder

ole32

ReleaseStgMedium CoInitialize CoUninitialize CoTaskMemFree CoCreateInstance OleInitialize

oleaut32

SysAllocString SysAllocStringLen VariantClear SysStringLen VariantCopy SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-09_de874c404b514a74bbf4425ec7f4e6b9_amadey_elex_luca-stealer_lynx_njrat

kernel32

user32

comdlg32

shell32

ole32

oleaut32

generic