2026-10-31_addbe020f6264011893678b762feceec_amadey_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-31_addbe020f6264011893678b762feceec_amadey_elex_luca-stealer_lynx_njrat
Size 1.5MB
Sample261101-1dfvcadc99
SHA256 3f957b05048b0f4373ea2e66249f1d2a63d635faede9a5b608cf0aeefab3e7ef
MD5 addbe020f6264011893678b762feceec
SHA1 d649b154592daed37bce7a2198c2407c8b61fa04
SHA512 ecf590540a79ebecc6d87747f22013ed54603223e1a4b0763bea76c54720a66a5619028f02722c6582715971162c7b528dca85c29953f7d925616dd495f4cf2a
SSDEEP 24576:FQsKWglB/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:GsDglBLNiXicJFFRGNzj3
TLSH
T178750251B4C1C572D4B2003149F8DA759A3DBD214B21A9EBA3D42B3E8F347D29B3167B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-31_addbe020f6264011893678b762feceec_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-10-31_addbe020f6264011893678b762feceec_amadey_elex_luca-stealer_lynx_njrat

.exe 1.5MB

2026-10-31_addbe020f6264011893678b762feceec_amadey_elex_luca-stealer_lynx_njrat

IMPHASH 482266026ea04f1d19b396ca9ef95396
SHA256 3f957b05048b0f4373ea2e66249f1d2a63d635faede9a5b608cf0aeefab3e7ef
MD5 addbe020f6264011893678b762feceec
SHA1 d649b154592daed37bce7a2198c2407c8b61fa04
SHA512 ecf590540a79ebecc6d87747f22013ed54603223e1a4b0763bea76c54720a66a5619028f02722c6582715971162c7b528dca85c29953f7d925616dd495f4cf2a
SSDEEP 24576:FQsKWglB/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:GsDglBLNiXicJFFRGNzj3
TLSH
T178750251B4C1C572D4B2003149F8DA759A3DBD214B21A9EBA3D42B3E8F347D29B3167B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32265

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\es91\source\repos\ConsoleApplication1\Release\ConsoleApplication1.pdb

kernel32

FindFirstFileW FindNextFileW FindClose Sleep GetLastError SetEndOfFile HeapSize ReadConsoleW CreateFileW GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindFirstFileExW HeapReAlloc ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CloseHandle GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx SetFilePointerEx WriteConsoleW

user32

wsprintfW

setupapi

SetupDiDestroyDeviceInfoList CM_Enable_DevNode SetupUninstallOEMInfW CM_Locate_DevNodeW SetupCopyOEMInfW SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo SetupDiGetDeviceInstanceIdW CM_Disable_DevNode

newdev

DiInstallDriverW

shlwapi

PathFileExistsW StrStrIW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-31_addbe020f6264011893678b762feceec_amadey_elex_luca-stealer_lynx_njrat

kernel32

user32

setupapi

newdev

shlwapi

generic