General
- Target 2026-10-22_3324afe910be95102f426893ee93c3b3_amadey_elex_luca-stealer_lynx_njrat
- Size 1.6MB
- Sample261024-vramlabs2v
- SHA256 0bc2bb68b131900fca6867ef98e3e9b9d825bb987e7dd0dc77da95e6d0ea5443
- MD5 3324afe910be95102f426893ee93c3b3
- SHA1 c746a70c7d025d6b32b0265a7281a5b6315d216c
- SHA512 2ebcd51a871267117675bac873a11190b159f7a3af306c2f7ad83ca17736db199b31e99e8a280a97a0ddcaa49c37c2f15974d65517e3e3efb8cc8680f2c63427
- SSDEEP 24576:ij/QugDwp7wkt8bk+ks+Vvwn3sqjnhMgeiCl7G0nehbGZpbD:SXp7wkt84+kjVvwnLDmg27RnWGj
- TLSH T18375E021BAF6C077D87201304EB9E625646EB8314F7189CB73E45A2D5F356D18B32BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_3324afe910be95102f426893ee93c3b3_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_3324afe910be95102f426893ee93c3b3_amadey_elex_luca-stealer_lynx_njrat
- Size 1.6MB
- SHA256 0bc2bb68b131900fca6867ef98e3e9b9d825bb987e7dd0dc77da95e6d0ea5443
- MD5 3324afe910be95102f426893ee93c3b3
- SHA1 c746a70c7d025d6b32b0265a7281a5b6315d216c
- SHA512 2ebcd51a871267117675bac873a11190b159f7a3af306c2f7ad83ca17736db199b31e99e8a280a97a0ddcaa49c37c2f15974d65517e3e3efb8cc8680f2c63427
- SSDEEP 24576:ij/QugDwp7wkt8bk+ks+Vvwn3sqjnhMgeiCl7G0nehbGZpbD:SXp7wkt84+kjVvwnLDmg27RnWGj
- TLSH T18375E021BAF6C077D87201304EB9E625646EB8314F7189CB73E45A2D5F356D18B32BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1