2026-09-08_a6190df31df272336d0bc4275fd483ed_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-08_a6190df31df272336d0bc4275fd483ed_amadey_elex_luca-stealer_lynx_njrat
Size 1.6MB
Sample260910-d7pysawdnf
SHA256 e9e4a09f0c58ef28b1e2747babede9deceefeadda4257c16fff86f0d1a658914
MD5 a6190df31df272336d0bc4275fd483ed
SHA1 d4521f9c875bfb9a4425d7c8afaccfbde3d1b984
SHA512 28428279e0d4955e3f0c9c768a42ea2ae911cea02803b34272f6f83fb81ac33544f5d6b3c062c2bda61e92aff797f518318de92861c07b4913568411ca1c59c9
SSDEEP 24576:vxDQSagCFtH22C9+bmOmbTk3reZCIT59z7m:J8S9CFtH2LlOpbeZB7m
TLSH
T1B385E043B6D08071DDF616350DB09BB95A3EBD604FE799CF93940ABE1A31ED09A20727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-08_a6190df31df272336d0bc4275fd483ed_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-09-08_a6190df31df272336d0bc4275fd483ed_amadey_elex_luca-stealer_lynx_njrat

.exe 1.6MB

2026-09-08_a6190df31df272336d0bc4275fd483ed_amadey_elex_luca-stealer_lynx_njrat

IMPHASH ed47739ecc284a43a5b5039f0d285da2
SHA256 e9e4a09f0c58ef28b1e2747babede9deceefeadda4257c16fff86f0d1a658914
MD5 a6190df31df272336d0bc4275fd483ed
SHA1 d4521f9c875bfb9a4425d7c8afaccfbde3d1b984
SHA512 28428279e0d4955e3f0c9c768a42ea2ae911cea02803b34272f6f83fb81ac33544f5d6b3c062c2bda61e92aff797f518318de92861c07b4913568411ca1c59c9
SSDEEP 24576:vxDQSagCFtH22C9+bmOmbTk3reZCIT59z7m:J8S9CFtH2LlOpbeZB7m
TLSH
T1B385E043B6D08071DDF616350DB09BB95A3EBD604FE799CF93940ABE1A31ED09A20727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39363

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Jenkins\workspace\MBAM-Windows\N_MBUpdateDlg\bin\Win32\Release\MBUpdateDlg.pdb

kernel32

LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW CreateFileW ReadConsoleW FindResourceExW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc LockResource GetLastError HeapSize InitializeCriticalSectionEx SetThreadUILanguage GetCurrentProcess HeapFree SetStdHandle SizeofResource IsDebuggerPresent OutputDebugStringW RaiseException EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStringTypeW WideCharToMultiByte EncodePointer LCMapStringEx GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetModuleFileNameW GetStdHandle WriteFile GetFileType LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile WriteConsoleW

user32

SetWindowPos MessageBoxW SendMessageW CloseWindow ShowWindow SetTimer KillTimer GetDesktopWindow LoadImageW

advapi32

RegCloseKey InitiateSystemShutdownExW LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueExW OpenProcessToken RegOpenKeyExW

shell32

ShellExecuteW

comctl32

ord345

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-08_a6190df31df272336d0bc4275fd483ed_amadey_elex_luca-stealer_lynx_njrat

kernel32

user32

advapi32

shell32

comctl32

generic