2026-10-08_0536e0130df5f2a9a617d5afdf613ed5_amadey_elex_luca-stealer_lynx_njrat

General

Target
2026-10-08_0536e0130df5f2a9a617d5afdf613ed5_amadey_elex_luca-stealer_lynx_njrat
Size 1.8MB
Sample261009-1yrscaef36
SHA256 cca04a11040a63f8ebbf1810ad0586dbc32e1676ab3c1a353359802b856c9754
MD5 0536e0130df5f2a9a617d5afdf613ed5
SHA1 c5ed6220c89ae1fa05e12bee3572c4ded2b19a72
SHA512 ffa7bc02f56b74f1e0e1e509df9c04051f2fab270a3f955f4747fd8562d84a6b72ff5ef79a7c5b871336ad695157b998a03f06eb868db50f7b10182515424ef6
SSDEEP 24576:O3F/vaRk1zTs7LwYnNM+PedCN/j2GLl3iFSE33b9Y:bk1zTs7HG+PhN/j2U4FH
TLSH
T1C395D010B999BCB9D2B638310675D1F2092CFC302960964F93D83A766F74593F53AB2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-08_0536e0130df5f2a9a617d5afdf613ed5_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-10-08_0536e0130df5f2a9a617d5afdf613ed5_amadey_elex_luca-stealer_lynx_njrat

.exe 1.8MB

2026-10-08_0536e0130df5f2a9a617d5afdf613ed5_amadey_elex_luca-stealer_lynx_njrat

IMPHASH 16b11392ec0a42d328c3139f4a537836
SHA256 cca04a11040a63f8ebbf1810ad0586dbc32e1676ab3c1a353359802b856c9754
MD5 0536e0130df5f2a9a617d5afdf613ed5
SHA1 c5ed6220c89ae1fa05e12bee3572c4ded2b19a72
SHA512 ffa7bc02f56b74f1e0e1e509df9c04051f2fab270a3f955f4747fd8562d84a6b72ff5ef79a7c5b871336ad695157b998a03f06eb868db50f7b10182515424ef6
SSDEEP 24576:O3F/vaRk1zTs7LwYnNM+PedCN/j2GLl3iFSE33b9Y:bk1zTs7HG+PhN/j2U4FH
TLSH
T1C395D010B999BCB9D2B638310675D1F2092CFC302960964F93D83A766F74593F53AB2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

G:\A\3\s\PCbuild\win32\venvwlauncher.pdb

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

kernel32

SetInformationJobObject QueryInformationJobObject GetBinaryTypeW GetCommandLineW GetCurrentProcess GetStdHandle AssignProcessToJobObject GetModuleFileNameW SetEnvironmentVariableW GetEnvironmentVariableW GetFileAttributesW DuplicateHandle MultiByteToWideChar SetConsoleCtrlHandler FormatMessageW GetLastError WaitForSingleObjectEx CloseHandle CreateJobObjectA CreateProcessW IsWow64Process GetExitCodeProcess HeapSize CreateFileW SetFilePointerEx GetFileSizeEx GetProcessHeap HeapReAlloc WriteConsoleW SetEndOfFile GetPrivateProfileStringW LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection DecodePointer DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW GetCommandLineA WriteFile HeapFree HeapAlloc GetCurrentThread GetFileType GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleCP GetConsoleMode GetStringTypeW ReadFile ReadConsoleW OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle

user32

MessageBoxW PostMessageA GetMessageA

advapi32

RegEnumKeyW RegOpenKeyExW RegQueryValueExW RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-08_0536e0130df5f2a9a617d5afdf613ed5_amadey_elex_luca-stealer_lynx_njrat

version

kernel32

user32

advapi32

generic