General
- Target 2026-10-25_a6f666c83a40511ee637612cff26466f_amadey_elex_luca-stealer_lynx_njrat
- Size 1.7MB
- Sample261026-vk3d2at19r
- SHA256 e02cb84dcac78272fbb08a07960c7ed66d7c3efee87d6276f67f8695ad3d8a5e
- MD5 a6f666c83a40511ee637612cff26466f
- SHA1 2b59f133dafef031a81e27b22f98931f0858f411
- SHA512 c904e92c0641d5995d98455d7a4193b9525da5a0beecb960c16cf47a4a7aab47fff09eee450cc52ca4e2951c92cefdc8faea3717a5459ce4519cd0c560ecca9a
- SSDEEP 49152:DV91TaStxIRmBdpUcLNiXicJFFRGNzj3:DVC/kdV7wRGpj3
- TLSH T17A85F03172B5CA31E46634318927AAF5666AFD20CF6156CF73843E2AB9302C1F934B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-25_a6f666c83a40511ee637612cff26466f_amadey_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_a6f666c83a40511ee637612cff26466f_amadey_elex_luca-stealer_lynx_njrat
- Size 1.7MB
- SHA256 e02cb84dcac78272fbb08a07960c7ed66d7c3efee87d6276f67f8695ad3d8a5e
- MD5 a6f666c83a40511ee637612cff26466f
- SHA1 2b59f133dafef031a81e27b22f98931f0858f411
- SHA512 c904e92c0641d5995d98455d7a4193b9525da5a0beecb960c16cf47a4a7aab47fff09eee450cc52ca4e2951c92cefdc8faea3717a5459ce4519cd0c560ecca9a
- SSDEEP 49152:DV91TaStxIRmBdpUcLNiXicJFFRGNzj3:DVC/kdV7wRGpj3
- TLSH T17A85F03172B5CA31E46634318927AAF5666AFD20CF6156CF73843E2AB9302C1F934B57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1