General
- Target 2026-09-16_fa4851b5e4eebf549665589a482259c7_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- Sample260916-sle9sazyex
- SHA256 2a68f78912ab881f041e7018ea4749e348f05aa7ffb28c32c5915413c708b22f
- MD5 fa4851b5e4eebf549665589a482259c7
- SHA1 e4ff86b90b9d2b278dd67d7b28acba8a5c3b2c6f
- SHA512 63e41efc7eab0a16a87bf503b9fff3ba62a966d617d35a3fe8ddd082502ee72d5ae35843a7fc0084058bb4c875da725de203a2204c0a388cf64fe414e1e52507
- SSDEEP 196608:L0u8mp0o4WB8H8ViWaMEYd4gfzQghHV42AWC14ocXB8E1Ytd/wazJkC9l9U1:LfwI8H6iWaxgbQ+HC128EKtdbz2c0
- TLSH T112A612D07366FA55EB1801324039B7F8866A61313B20D9FBBE971ACB1D581C6ADB0D73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_fa4851b5e4eebf549665589a482259c7_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_fa4851b5e4eebf549665589a482259c7_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_fa4851b5e4eebf549665589a482259c7_amadey_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- SHA256 2a68f78912ab881f041e7018ea4749e348f05aa7ffb28c32c5915413c708b22f
- MD5 fa4851b5e4eebf549665589a482259c7
- SHA1 e4ff86b90b9d2b278dd67d7b28acba8a5c3b2c6f
- SHA512 63e41efc7eab0a16a87bf503b9fff3ba62a966d617d35a3fe8ddd082502ee72d5ae35843a7fc0084058bb4c875da725de203a2204c0a388cf64fe414e1e52507
- SSDEEP 196608:L0u8mp0o4WB8H8ViWaMEYd4gfzQghHV42AWC14ocXB8E1Ytd/wazJkC9l9U1:LfwI8H6iWaxgbQ+HC128EKtdbz2c0
- TLSH T112A612D07366FA55EB1801324039B7F8866A61313B20D9FBBE971ACB1D581C6ADB0D73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE