2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
Size 1.7MB
Sample260922-llymssshnd
SHA256 ff3515615c608a9ae692046a963c53ead16286ddc6d6aa04a59d1ffd7088fafe
MD5 de87b27f8873f56ee555b353783681a4
SHA1 2c5a6d4bf5b6b9cfdc655092ea3a3b1ae5807efa
SHA512 fbe62a67bf24fc270a553e5f9c4736f6c1faff7c3fc24b0e8ce8686415b1f9af346bad7eee1e7c557697de749f54e73254b1bdc48193b84c7a8a8741b8dd8d61
SSDEEP 24576:2gH7TqP56MW2eHYwKpQknQ/tbw/2Mkjy6Fr7g0oj:dTWAMOHYw+QkQ/lFTjN4
TLSH
T17E85F12579A4C073C13311310D56D794A73EF9B04F2246DBB7C86FBE2E346C1AB25AA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 1.7MB

2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 0d7dd2abe90013cab9ab51d09ed35612
SHA256 ff3515615c608a9ae692046a963c53ead16286ddc6d6aa04a59d1ffd7088fafe
MD5 de87b27f8873f56ee555b353783681a4
SHA1 2c5a6d4bf5b6b9cfdc655092ea3a3b1ae5807efa
SHA512 fbe62a67bf24fc270a553e5f9c4736f6c1faff7c3fc24b0e8ce8686415b1f9af346bad7eee1e7c557697de749f54e73254b1bdc48193b84c7a8a8741b8dd8d61
SSDEEP 24576:2gH7TqP56MW2eHYwKpQknQ/tbw/2Mkjy6Fr7g0oj:dTWAMOHYw+QkQ/lFTjN4
TLSH
T17E85F12579A4C073C13311310D56D794A73EF9B04F2246DBB7C86FBE2E346C1AB25AA6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

168727

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

StringFromGUID2 IIDFromString

shell32

SHGetFolderPathA SHGetFolderPathW

user32

GetMessageA GetMessageW DispatchMessageA DispatchMessageW PeekMessageA MsgWaitForMultipleObjectsEx IsWindowUnicode TranslateMessage

kernel32

GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetDllDirectoryA FileTimeToSystemTime LocalFree MultiByteToWideChar WideCharToMultiByte WaitForSingleObject LoadLibraryExW OpenMutexA DeleteFileA FindClose GetFileAttributesA RemoveDirectoryA SetFileAttributesA CloseHandle SetLastError GetCommandLineW GetTempPathA GetCurrentProcess GetSystemDirectoryA GetNativeSystemInfo GetModuleFileNameA GetModuleHandleExW Sleep GetCurrentProcessId GetCurrentThreadId GetLocalTime FormatMessageW ReadFile SetHandleInformation CreatePipe PeekNamedPipe TerminateProcess GetExitCodeProcess DecodePointer GetModuleHandleExA LoadResource LockResource SizeofResource FindResourceA FreeLibrary GetProcAddress LoadLibraryW QueryPerformanceCounter CreateFileW SetFilePointerEx InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetStringTypeW InitializeCriticalSectionEx EncodePointer LCMapStringEx GetCPInfo IsDebuggerPresent OutputDebugStringW RaiseException SetUnhandledExceptionFilter CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID UnhandledExceptionFilter EnumSystemLocalesW FlushFileBuffers GetFileSizeEx ReadConsoleW GetCurrentDirectoryW HeapReAlloc GetTimeZoneInformation HeapSize FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap RtlUnwind TlsAlloc HeapFree HeapAlloc IsProcessorFeaturePresent GetStartupInfoW GetModuleHandleW GetSystemTimeAsFileTime CreateProcessA GetCommandLineA ExitProcess SetStdHandle CreateDirectoryW GetFullPathNameW WriteConsoleW GetModuleFileNameW GetStdHandle GetConsoleMode GetConsoleOutputCP WriteFile SetEndOfFile SystemTimeToTzSpecificLocalTime GetFileType GetFileInformationByHandle GetDriveTypeW TlsFree TlsSetValue TlsGetValue InitializeSListHead

advapi32

RegCreateKeyExA ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegQueryValueExA RegOpenKeyExA

oleaut32

SysFreeString GetErrorInfo

msi

ord168 ord137 ord141 ord8 ord117 ord159 ord160 ord91 ord115 ord67 ord31 ord189 ord44 ord204

version

VerQueryValueW GetFileVersionInfoA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-21_de87b27f8873f56ee555b353783681a4_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

ole32

shell32

user32

kernel32

advapi32

oleaut32

msi

version

generic