General
- Target 2026-10-10_c51a79e5c6dac5659a15720e1a3d56b8_amadey_elex_luca-stealer_lynx_njrat
- Size 1.7MB
- Sample261011-dew7dscg33
- SHA256 40d096d5663d12e993ce098a19d392e1660d11a8a18d6f38b9de1e63134a2e55
- MD5 c51a79e5c6dac5659a15720e1a3d56b8
- SHA1 6778a7f7a75aa54b7e7354046b8481b145f88287
- SHA512 ff5f5d1897ac58bba3a3b4e34faf4202efc605a59853228b1fa438eb72c230bd377df26825817a62294bc1f52ad35311346316b710cd2000a69fac00ba57ea38
- SSDEEP 49152:0k46/fl+CrLR+ft983Dl3gEe8xA+y+bHNvPZumqUIWPLXFKo:r/f0CvR+l9EDl3VxA+y6umqU1LVKo
- TLSH T131851210FC41E032D0A205B0DB65DAF35938AD61AB5494C3F3E07DB6BA349E1663DB6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_c51a79e5c6dac5659a15720e1a3d56b8_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_c51a79e5c6dac5659a15720e1a3d56b8_amadey_elex_luca-stealer_lynx_njrat
- Size 1.7MB
- SHA256 40d096d5663d12e993ce098a19d392e1660d11a8a18d6f38b9de1e63134a2e55
- MD5 c51a79e5c6dac5659a15720e1a3d56b8
- SHA1 6778a7f7a75aa54b7e7354046b8481b145f88287
- SHA512 ff5f5d1897ac58bba3a3b4e34faf4202efc605a59853228b1fa438eb72c230bd377df26825817a62294bc1f52ad35311346316b710cd2000a69fac00ba57ea38
- SSDEEP 49152:0k46/fl+CrLR+ft983Dl3gEe8xA+y+bHNvPZumqUIWPLXFKo:r/f0CvR+l9EDl3VxA+y6umqU1LVKo
- TLSH T131851210FC41E032D0A205B0DB65DAF35938AD61AB5494C3F3E07DB6BA349E1663DB6E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1