General
- Target 2026-09-16_2b51d1b7c34ae4533ece83a972361089_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260916-2yzcvsfc78
- SHA256 2d94b247adbfd456be91cc4bdd504ed6b56c99fa0811cc44ed551ef7c0fd1f7e
- MD5 2b51d1b7c34ae4533ece83a972361089
- SHA1 ba87d83bafe40b40e6f8f07a989eae5fea873804
- SHA512 f19f68da600ea4e9a59fcda2656585e323fff4f4e02d7a4a757b6836185cc37b9016f9025555d1e82697ab88ad03d1304ef5ad219bc9b4b163ddefc6d1e0be10
- SSDEEP 196608:ZT/PA3GA0/2sEJ7zJNV45oDYC0DLp2gdSRz4IdQJV31UQS7l6l9k:Bhy7zJNwoDoF2htOj3SQSZWy
- TLSH T110A612C07366FA65EB5902314139BBB8865712323B10D9EBBE871AD71C981C2EDB1D37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_2b51d1b7c34ae4533ece83a972361089_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_2b51d1b7c34ae4533ece83a972361089_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_2b51d1b7c34ae4533ece83a972361089_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 2d94b247adbfd456be91cc4bdd504ed6b56c99fa0811cc44ed551ef7c0fd1f7e
- MD5 2b51d1b7c34ae4533ece83a972361089
- SHA1 ba87d83bafe40b40e6f8f07a989eae5fea873804
- SHA512 f19f68da600ea4e9a59fcda2656585e323fff4f4e02d7a4a757b6836185cc37b9016f9025555d1e82697ab88ad03d1304ef5ad219bc9b4b163ddefc6d1e0be10
- SSDEEP 196608:ZT/PA3GA0/2sEJ7zJNV45oDYC0DLp2gdSRz4IdQJV31UQS7l6l9k:Bhy7zJNwoDoF2htOj3SQSZWy
- TLSH T110A612C07366FA65EB5902314139BBB8865712323B10D9EBBE871AD71C981C2EDB1D37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE