General
- Target 2026-10-08_0536e0130df5f2a9a617d5afdf613ed5_amadey_elex_luca-stealer_lynx_njrat
- Size 1.8MB
- Sample261009-1yrscaef36
- SHA256 cca04a11040a63f8ebbf1810ad0586dbc32e1676ab3c1a353359802b856c9754
- MD5 0536e0130df5f2a9a617d5afdf613ed5
- SHA1 c5ed6220c89ae1fa05e12bee3572c4ded2b19a72
- SHA512 ffa7bc02f56b74f1e0e1e509df9c04051f2fab270a3f955f4747fd8562d84a6b72ff5ef79a7c5b871336ad695157b998a03f06eb868db50f7b10182515424ef6
- SSDEEP 24576:O3F/vaRk1zTs7LwYnNM+PedCN/j2GLl3iFSE33b9Y:bk1zTs7HG+PhN/j2U4FH
- TLSH T1C395D010B999BCB9D2B638310675D1F2092CFC302960964F93D83A766F74593F53AB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_0536e0130df5f2a9a617d5afdf613ed5_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_0536e0130df5f2a9a617d5afdf613ed5_amadey_elex_luca-stealer_lynx_njrat
- Size 1.8MB
- SHA256 cca04a11040a63f8ebbf1810ad0586dbc32e1676ab3c1a353359802b856c9754
- MD5 0536e0130df5f2a9a617d5afdf613ed5
- SHA1 c5ed6220c89ae1fa05e12bee3572c4ded2b19a72
- SHA512 ffa7bc02f56b74f1e0e1e509df9c04051f2fab270a3f955f4747fd8562d84a6b72ff5ef79a7c5b871336ad695157b998a03f06eb868db50f7b10182515424ef6
- SSDEEP 24576:O3F/vaRk1zTs7LwYnNM+PedCN/j2GLl3iFSE33b9Y:bk1zTs7HG+PhN/j2U4FH
- TLSH T1C395D010B999BCB9D2B638310675D1F2092CFC302960964F93D83A766F74593F53AB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1