2026-10-22_349a7df06cd6926383b6a1a58f819da7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

General

Target
2026-10-22_349a7df06cd6926383b6a1a58f819da7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
Size 1.9MB
Sample261024-vj1ttafd24
SHA256 f1dcf35ff8b719be6f8705caecb44177bf3d0c87f6420ab6e143764cdb5ffbc9
MD5 349a7df06cd6926383b6a1a58f819da7
SHA1 ed30e20cabfd01e00a6d1c7c301e5858a7b0a332
SHA512 a963b1efe49c7640d88e1bb655f3548cb811ceed20686767ec2c680c38a9fbb0f34e4da12430aa8739e40617a4260d90df88d0ae49f92e5ae3761ae77d47f2eb
SSDEEP 24576:lecyPZkNUW7wJrkhS0rvHIVSf7lfZSIFJzW/Z75dmsnQ/tbw/2Mkjy6Fr7g0o2:lTyBkiW7Y0rvHIVSa0SksQ/lFTjN4
TLSH
T1A895D0307E80C121EDF310B689EDB539852C94701B1955D7A2C81BFEE6696E23F36E93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_349a7df06cd6926383b6a1a58f819da7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-10-22_349a7df06cd6926383b6a1a58f819da7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 1.9MB

2026-10-22_349a7df06cd6926383b6a1a58f819da7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 8965538112feacd3d47ecf01af21be5b
SHA256 f1dcf35ff8b719be6f8705caecb44177bf3d0c87f6420ab6e143764cdb5ffbc9
MD5 349a7df06cd6926383b6a1a58f819da7
SHA1 ed30e20cabfd01e00a6d1c7c301e5858a7b0a332
SHA512 a963b1efe49c7640d88e1bb655f3548cb811ceed20686767ec2c680c38a9fbb0f34e4da12430aa8739e40617a4260d90df88d0ae49f92e5ae3761ae77d47f2eb
SSDEEP 24576:lecyPZkNUW7wJrkhS0rvHIVSf7lfZSIFJzW/Z75dmsnQ/tbw/2Mkjy6Fr7g0o2:lTyBkiW7Y0rvHIVSa0SksQ/lFTjN4
TLSH
T1A895D0307E80C121EDF310B689EDB539852C94701B1955D7A2C81BFEE6696E23F36E93
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Rockchip\vs_projects\upgrade_tool\upgrade_tool.pdb

setupapi

SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiGetClassDevsA CM_Locate_DevNodeA CM_Get_Sibling CM_Get_Parent CM_Get_DevNode_Registry_PropertyA CM_Get_Device_IDA CM_Get_Child SetupDiGetDeviceRegistryPropertyA SetupDiDestroyDeviceInfoList

shell32

CommandLineToArgvW

kernel32

TerminateProcess HeapSize CreateFileW FlushFileBuffers SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GetStdHandle CreateDirectoryA FindFirstFileA GetFileAttributesA Sleep GetModuleFileNameA LocalFree CopyFileA MultiByteToWideChar WideCharToMultiByte FillConsoleOutputCharacterA FillConsoleOutputAttribute GetConsoleScreenBufferInfo SetConsoleCursorPosition SetConsoleTextAttribute ScrollConsoleScreenBufferA CreateFileA ReadFile WriteFile CloseHandle GetLastError DeviceIoControl GetDriveTypeA GetLogicalDrives SetFilePointer FreeLibrary GetProcAddress LoadLibraryA GlobalAlloc GlobalFree ReleaseMutex WaitForSingleObject CreateMutexA OpenMutexA FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess SetEndOfFile IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead FindClose RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess GetCommandLineA GetCommandLineW GetCurrentThread HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleMode ReadConsoleW SetFilePointerEx GetConsoleOutputCP GetFileSizeEx OutputDebugStringW SetConsoleCtrlHandler GetTimeZoneInformation HeapReAlloc

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

182KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

600KB

Virtual Size

604KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_349a7df06cd6926383b6a1a58f819da7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

setupapi

shell32

kernel32

generic