2026-09-19_9fd29584dea468704e41c3eb7172abf9_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-19_9fd29584dea468704e41c3eb7172abf9_amadey_elex_luca-stealer_lynx_njrat
Size 1.0MB
Sample260919-2gpgbsxerd
SHA256 5551e8bb9a68007323e1a26ce76d9dc4e9d59b5b6948d228d1a933807048e07c
MD5 9fd29584dea468704e41c3eb7172abf9
SHA1 b119cebc3fcdd5d134575d79074ae90ed2e9953c
SHA512 845d53dcb22a0124f09e3fd284ce4588e0cdac8d33fb4487c8fa5816e95a855d427d8ac7f29d4ad2bde2ff78e5140a7b853671bffa839c391b73b8196f2ea638
SSDEEP 24576:6Ai1VLfMhBUFPTw/JNuqSs80wdZQwBd6j:/BUtTwxNn2ZJqj
TLSH
T144357B25B1419C52DACE1931E0E5DCBC11376E2E3E29624F2B647D2837BA7DFCA32506
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-19_9fd29584dea468704e41c3eb7172abf9_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-09-19_9fd29584dea468704e41c3eb7172abf9_amadey_elex_luca-stealer_lynx_njrat

.exe 1.0MB

2026-09-19_9fd29584dea468704e41c3eb7172abf9_amadey_elex_luca-stealer_lynx_njrat

IMPHASH 27cdd7aaa102cd57ff71710f66c8c5f8
SHA256 5551e8bb9a68007323e1a26ce76d9dc4e9d59b5b6948d228d1a933807048e07c
MD5 9fd29584dea468704e41c3eb7172abf9
SHA1 b119cebc3fcdd5d134575d79074ae90ed2e9953c
SHA512 845d53dcb22a0124f09e3fd284ce4588e0cdac8d33fb4487c8fa5816e95a855d427d8ac7f29d4ad2bde2ff78e5140a7b853671bffa839c391b73b8196f2ea638
SSDEEP 24576:6Ai1VLfMhBUFPTw/JNuqSs80wdZQwBd6j:/BUtTwxNn2ZJqj
TLSH
T144357B25B1419C52DACE1931E0E5DCBC11376E2E3E29624F2B647D2837BA7DFCA32506
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\PICKIT NEW\XANH_0407_PIC_ALL_PICkit\Release\Template.pdb

kernel32

InitializeCriticalSection LeaveCriticalSection TryEnterCriticalSection CreateThread CreateEventA CreateFileA lstrcatA WaitForSingleObject lstrlenA CancelIo DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW Sleep GetTempPathA GetTickCount RtlUnwind GetLastError SetLastError EnterCriticalSection DeleteCriticalSection EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException ReadFile GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW SetFilePointerEx GetConsoleMode ReadConsoleW GetFileType GetFileSizeEx HeapAlloc FlushFileBuffers GetConsoleOutputCP HeapFree CloseHandle LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW GetProcessHeap CreateFileW HeapSize HeapReAlloc SetEndOfFile WriteConsoleW LoadLibraryA

user32

EnableWindow EndPaint BeginPaint GetDlgItem MessageBoxA LoadImageA DialogBoxParamA SendMessageW SendMessageA SetWindowTextA SetWindowTextW wsprintfA LoadIconW EndDialog

comctl32

ord17

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntryA

setupapi

SetupDiGetDeviceInterfaceDetailA SetupDiGetClassDevsA SetupDiEnumDeviceInterfaces SetupDiEnumDeviceInfo SetupDiGetDeviceRegistryPropertyA

gdi32

CreateCompatibleDC BitBlt SelectObject DeleteDC

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-19_9fd29584dea468704e41c3eb7172abf9_amadey_elex_luca-stealer_lynx_njrat

kernel32

user32

comctl32

urlmon

wininet

setupapi

gdi32

generic