2026-09-16_c9255b06524c6b15cab4a6817d0c8910_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_c9255b06524c6b15cab4a6817d0c8910_amadey_elex_luca-stealer_lynx_njrat
Size 10.1MB
Sample260916-vky2ls1yfx
SHA256 960ece9a34a05081b4ce474af61ad0b2ced541893d14e26d5fcfbe776c2dbe05
MD5 c9255b06524c6b15cab4a6817d0c8910
SHA1 5f3061aa0b6892fcce22000d07196006aeecdeea
SHA512 80acec944867e2071e2cdefbc4147ee889fd057cb0b7a086191d80e93bc4ffa600fb727f8a9373a4db163bdde747f125bd5d3512992461cd669b5ca2321c5352
SSDEEP 196608:v8y+E1zdyURt6a/UOHiliRQFNUsnG0k/NeAzQF0GwyaG+H+o6JDW9c:v8LCQKDUOkNcHoAzQFue/J5
TLSH
T1C4B611C27751F826D34601708D29BBF8821A65303720E5E7BF8F36D95E685C5AEB0B36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_c9255b06524c6b15cab4a6817d0c8910_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-09-16_c9255b06524c6b15cab4a6817d0c8910_amadey_elex_luca-stealer_lynx_njrat

.exe 10.1MB

2026-09-16_c9255b06524c6b15cab4a6817d0c8910_amadey_elex_luca-stealer_lynx_njrat

IMPHASH 8d36d4792d9c9f7dbb9c70708ec83ca9
SHA256 960ece9a34a05081b4ce474af61ad0b2ced541893d14e26d5fcfbe776c2dbe05
MD5 c9255b06524c6b15cab4a6817d0c8910
SHA1 5f3061aa0b6892fcce22000d07196006aeecdeea
SHA512 80acec944867e2071e2cdefbc4147ee889fd057cb0b7a086191d80e93bc4ffa600fb727f8a9373a4db163bdde747f125bd5d3512992461cd669b5ca2321c5352
SSDEEP 196608:v8y+E1zdyURt6a/UOHiliRQFNUsnG0k/NeAzQF0GwyaG+H+o6JDW9c:v8LCQKDUOkNcHoAzQFue/J5
TLSH
T1C4B611C27751F826D34601708D29BBF8821A65303720E5E7BF8F36D95E685C5AEB0B36
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\NNRus.git\CppDownloader.SCB\Plugins\7ZipDownloader\Output\SFXWin.pdb

kernel32

VirtualProtect VirtualFree FreeLibrary GetProcAddress LoadLibraryA lstrlenA IsBadReadPtr GetThreadLocale EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CompareFileTime Sleep WaitForMultipleObjects GetCurrentProcess SetPriorityClass GetTickCount GetStdHandle GetFileInformationByHandle ReadFile WriteFile GetModuleHandleW GlobalUnlock GlobalLock GetModuleFileNameA GetModuleFileNameW LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree FormatMessageA FormatMessageW SetCurrentDirectoryA SetCurrentDirectoryW GetCurrentDirectoryA GetCurrentDirectoryW CreateDirectoryA CreateDirectoryW CreateFileW DeleteFileA DeleteFileW RemoveDirectoryA RemoveDirectoryW SetFileAttributesA SetFileAttributesW SetFileTime GetTempPathW GetTempPathA CloseHandle SetLastError GetCurrentProcessId GetCurrentThreadId GetSystemDirectoryA GetSystemDirectoryW GetWindowsDirectoryA GetWindowsDirectoryW MoveFileA MoveFileW CreateHardLinkW FindClose FindCloseChangeNotification FindFirstChangeNotificationA FindFirstChangeNotificationW FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW GetFileAttributesA GetFileAttributesW GetLogicalDriveStringsW GetModuleHandleA GetLogicalDriveStringsA CreateFileA GetFileSize SetEndOfFile SetFilePointer GlobalAlloc GlobalReAlloc GlobalFree FileTimeToLocalFileTime FileTimeToSystemTime VirtualAlloc GetSystemInfo GlobalMemoryStatus GetProcessAffinityMask GetSystemTimeAsFileTime FileTimeToDosDateTime DosDateTimeToFileTime AreFileApisANSI MultiByteToWideChar WideCharToMultiByte IsProcessorFeaturePresent GetVersion InitializeCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventA ResumeThread SetThreadAffinityMask CreateSemaphoreA GetVersionExA ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapSize GetTimeZoneInformation SetStdHandle OutputDebugStringW SetConsoleCtrlHandler GetFileType SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP WriteConsoleW IsValidCodePage FindFirstFileExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapReAlloc GetCurrentThread ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RtlUnwind RaiseException GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer GetLocaleInfoEx InitializeCriticalSectionEx GetStringTypeW InitializeSListHead QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent TerminateProcess SetUnhandledExceptionFilter GetNativeSystemInfo GetProcessHeap HeapFree HeapAlloc GlobalSize GetLastError UnhandledExceptionFilter

user32

PostMessageA SendMessageA CharPrevExA ShowWindow MoveWindow EndDialog GetDlgItem CharUpperW CharUpperA GetWindowTextLengthW GetWindowTextLengthA GetWindowTextW GetWindowTextA SetWindowTextW SetWindowTextA CreateWindowExW RegisterClassW RegisterClassA RegisterClipboardFormatA LoadStringW LoadStringA IsClipboardFormatAvailable EmptyClipboard SetClipboardData CloseClipboard OpenClipboard SetWindowLongW CreateWindowExA CallWindowProcW CallWindowProcA GetMonitorInfoA MonitorFromWindow SystemParametersInfoA MapDialogRect SetWindowLongA GetWindowLongA GetDialogBaseUnits DialogBoxParamW DialogBoxParamA CreateDialogParamW CreateDialogParamA SendMessageW LoadIconA LoadCursorA GetParent SetCursor SetTimer IsDlgButtonChecked CheckDlgButton ScreenToClient GetWindowRect MessageBoxW InvalidateRect EnableWindow GetKeyState GetFocus SetFocus KillTimer

comdlg32

GetSaveFileNameA GetOpenFileNameW GetOpenFileNameA CommDlgExtendedError GetSaveFileNameW

shell32

SHBrowseForFolderA SHGetFileInfoA SHGetPathFromIDListA SHGetSpecialFolderLocation SHGetDesktopFolder

ole32

ReleaseStgMedium CoInitialize CoUninitialize CoTaskMemFree CoCreateInstance OleInitialize

oleaut32

SysAllocString SysAllocStringLen VariantClear SysStringLen VariantCopy SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_c9255b06524c6b15cab4a6817d0c8910_amadey_elex_luca-stealer_lynx_njrat

kernel32

user32

comdlg32

shell32

ole32

oleaut32

generic