2026-09-29_65cea36f547c56fde0de31f0e1a2b126_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_65cea36f547c56fde0de31f0e1a2b126_amadey_elex_luca-stealer_lynx_njrat
Size 1.7MB
Sample260930-yrdk2a1w7l
SHA256 f5165411cbcab99a6469925b20f746bbef853c59e0c5455f6dc8adedd45d5e8b
MD5 65cea36f547c56fde0de31f0e1a2b126
SHA1 aeb3c1af47c1825fa1b25208d7705b7a52cae622
SHA512 e75b9a72a36f0af942a3e00b8d2db4c167300c83d8a98671627e6102ae20c6eadea9e30e5f3bd1cd72a3c1a22413c4e63d6f8fa9033a51f5e5057d923398637d
SSDEEP 12288:w9ccnNCIvpAtGT8JNTpWSgN/wwRN0UL0G/TVOo3HC75nSE33b9YvFHi:w9DNC0AtzdCN/j2GLl3iFSE33b9L
TLSH
T13785F121B8D1C073D567093689B8DF795E2DFCB08F606AC797801EFACA30AD19B35616
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_65cea36f547c56fde0de31f0e1a2b126_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-09-29_65cea36f547c56fde0de31f0e1a2b126_amadey_elex_luca-stealer_lynx_njrat

.exe 1.7MB

2026-09-29_65cea36f547c56fde0de31f0e1a2b126_amadey_elex_luca-stealer_lynx_njrat

IMPHASH 19c1071c6be5f0be7f7140dbc96a3c77
SHA256 f5165411cbcab99a6469925b20f746bbef853c59e0c5455f6dc8adedd45d5e8b
MD5 65cea36f547c56fde0de31f0e1a2b126
SHA1 aeb3c1af47c1825fa1b25208d7705b7a52cae622
SHA512 e75b9a72a36f0af942a3e00b8d2db4c167300c83d8a98671627e6102ae20c6eadea9e30e5f3bd1cd72a3c1a22413c4e63d6f8fa9033a51f5e5057d923398637d
SSDEEP 12288:w9ccnNCIvpAtGT8JNTpWSgN/wwRN0UL0G/TVOo3HC75nSE33b9YvFHi:w9DNC0AtzdCN/j2GLl3iFSE33b9L
TLSH
T13785F121B8D1C073D567093689B8DF795E2DFCB08F606AC797801EFACA30AD19B35616
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35740

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleW CreateToolhelp32Snapshot GetTickCount OpenProcess GetCurrentProcess GetLastError Process32NextW Process32FirstW CloseHandle CreateFileW HeapSize GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc LocalFree EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW TerminateProcess RaiseException RtlUnwind SetLastError VirtualQuery InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW QueryPerformanceFrequency GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW

advapi32

SetTokenInformation ImpersonateLoggedOnUser GetLengthSid AdjustTokenPrivileges OpenProcessToken LookupPrivilegeValueA

ole32

CoInitialize

oleaut32

VariantClear SysAllocString SysFreeString

ws2_32

htons

winhttp

WinHttpConnect WinHttpReceiveResponse WinHttpOpen WinHttpCloseHandle WinHttpSendRequest WinHttpOpenRequest WinHttpReadData WinHttpQueryDataAvailable

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_65cea36f547c56fde0de31f0e1a2b126_amadey_elex_luca-stealer_lynx_njrat

kernel32

advapi32

ole32

oleaut32

ws2_32

winhttp

generic