General
- Target 2026-09-16_3262ce098b04edbcd1727c31cf2478c9_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260916-qpcxqavy2m
- SHA256 87d767ce9691655b261958b0413825f4701369394454a62ed56690b03aec1343
- MD5 3262ce098b04edbcd1727c31cf2478c9
- SHA1 738c8d6bdca0cedc2a59b9f55417d04d5c1c912c
- SHA512 96a5ca962d47e4b840d40470e6cffaa5fedef2fd626caeb13fbeef95f9f140f08b0b7cc8ed54cfbac541e4bf33a32a0ab92cf82ec5c11e96a93d077f403cf3e5
- SSDEEP 196608:73LnlgXu1ZlyOzKY/4LNoe5e9K/JG4QuyGKrs2XUl4Hq+Ate78vT2N0HfBl9g:73LCXicOALNoOe9mGqyd7Ulaq+G1vT2v
- TLSH T103A612C07366FA15EB5902714038BAF8865B61313B15C5EBBF872AC71D985C2AEB1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_3262ce098b04edbcd1727c31cf2478c9_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_3262ce098b04edbcd1727c31cf2478c9_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_3262ce098b04edbcd1727c31cf2478c9_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 87d767ce9691655b261958b0413825f4701369394454a62ed56690b03aec1343
- MD5 3262ce098b04edbcd1727c31cf2478c9
- SHA1 738c8d6bdca0cedc2a59b9f55417d04d5c1c912c
- SHA512 96a5ca962d47e4b840d40470e6cffaa5fedef2fd626caeb13fbeef95f9f140f08b0b7cc8ed54cfbac541e4bf33a32a0ab92cf82ec5c11e96a93d077f403cf3e5
- SSDEEP 196608:73LnlgXu1ZlyOzKY/4LNoe5e9K/JG4QuyGKrs2XUl4Hq+Ate78vT2N0HfBl9g:73LCXicOALNoOe9mGqyd7Ulaq+G1vT2v
- TLSH T103A612C07366FA15EB5902714038BAF8865B61313B15C5EBBF872AC71D985C2AEB1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE