2026-09-19_134d366f7010303119e3fbfe3fffa6aa_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader

General

Target
2026-09-19_134d366f7010303119e3fbfe3fffa6aa_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader
Size 1.1MB
Sample260919-rfvxlsstew
SHA256 0012f3af9c0a99fdd77772a42319594282832e6f2239c9fbfba3b1e60a20157a
MD5 134d366f7010303119e3fbfe3fffa6aa
SHA1 619952a255d1dba0be57a91959d7fb695909093e
SHA512 94b8dee672bbaec8ebe90d9e095152adddb93761d07dc38555b7f090719d779b3e1097192f2067f65d75e664d0232b8d3f14b68ec689a515e888ec0a769e8fa6
SSDEEP 24576:xbCmNwgod5I/Ggf5DxOXXn3soyOyWj2Zg:xbId5I/GnXsoWW
TLSH
T1F3358D213CC49032EDF210B647FDBB7982ADF5A0031956DF91D8D6EED6606C27B32692
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-19_134d366f7010303119e3fbfe3fffa6aa_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader

File Explorer

2026-09-19_134d366f7010303119e3fbfe3fffa6aa_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader

.exe 1.1MB

2026-09-19_134d366f7010303119e3fbfe3fffa6aa_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader

IMPHASH 09b5d280d2d122a8b769c1e2cd1b4ca6
SHA256 0012f3af9c0a99fdd77772a42319594282832e6f2239c9fbfba3b1e60a20157a
MD5 134d366f7010303119e3fbfe3fffa6aa
SHA1 619952a255d1dba0be57a91959d7fb695909093e
SHA512 94b8dee672bbaec8ebe90d9e095152adddb93761d07dc38555b7f090719d779b3e1097192f2067f65d75e664d0232b8d3f14b68ec689a515e888ec0a769e8fa6
SSDEEP 24576:xbCmNwgod5I/Ggf5DxOXXn3soyOyWj2Zg:xbId5I/GnXsoWW
TLSH
T1F3358D213CC49032EDF210B647FDBB7982ADF5A0031956DF91D8D6EED6606C27B32692
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4571

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\z98c31q5eyhl\Solution.pdb

kernel32

CloseHandle WaitForSingleObjectEx Sleep SwitchToThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo FormatMessageA WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter QueryPerformanceFrequency InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW LocalFree GetLocaleInfoEx EncodePointer DecodePointer LCMapStringEx SetFileInformationByHandle GetTempPathW FlsAlloc FlsGetValue FlsSetValue FlsFree InitOnceExecuteOnce SleepConditionVariableCS CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetSystemTimeAsFileTime GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetModuleHandleW GetProcAddress GetFileInformationByHandleEx CreateSymbolicLinkW CompareStringEx GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW GetCurrentThread HeapFree HeapAlloc GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType SetConsoleCtrlHandler FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Name

.text

Size

733KB

Virtual Size

732KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.555

Size

218KB

Virtual Size

217KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-19_134d366f7010303119e3fbfe3fffa6aa_amadey_elex_luca-stealer_lynx_njrat_redline-stealer_risepro_smoke-loader

kernel32

generic