2026-11-01_f7a0caa4d1cc03b3be3634a9d24d32c7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

General

Target
2026-11-01_f7a0caa4d1cc03b3be3634a9d24d32c7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
Size 1.3MB
Sample261102-c5akmsgx9q
SHA256 f02cb14da9cab3e5f5b99b97dd0b8b2727b11ba6b7f357a23b7dc92310e9dbb1
MD5 f7a0caa4d1cc03b3be3634a9d24d32c7
SHA1 5adcd5e56322e4a91b7a39d060f40914e2b84aab
SHA512 cdea13942090f1ec020d3d8a4f1112e5a641410087fa0b1af0129abc40b5c095058e72f2ba7c7fd253cea6d1cf906a2de07e77961ecc796d2e006eef752ec575
SSDEEP 24576:3E6Ub0lcBJgYxT5WeDTtqEq88zTlGPlp+Ks3Hdo0DGC7Sx:pdlcLgUweDTqX2/+Ks3Hdo0v7
TLSH
T17A5558F26389E8ADD07307335B7692FC463EAD310871C54A6E90365E8A78FC27523B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_f7a0caa4d1cc03b3be3634a9d24d32c7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-11-01_f7a0caa4d1cc03b3be3634a9d24d32c7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 1.3MB

2026-11-01_f7a0caa4d1cc03b3be3634a9d24d32c7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 5950a73bd89d5f0762988fe4a394f6ab
SHA256 f02cb14da9cab3e5f5b99b97dd0b8b2727b11ba6b7f357a23b7dc92310e9dbb1
MD5 f7a0caa4d1cc03b3be3634a9d24d32c7
SHA1 5adcd5e56322e4a91b7a39d060f40914e2b84aab
SHA512 cdea13942090f1ec020d3d8a4f1112e5a641410087fa0b1af0129abc40b5c095058e72f2ba7c7fd253cea6d1cf906a2de07e77961ecc796d2e006eef752ec575
SSDEEP 24576:3E6Ub0lcBJgYxT5WeDTtqEq88zTlGPlp+Ks3Hdo0DGC7Sx:pdlcLgUweDTqX2/+Ks3Hdo0v7
TLSH
T17A5558F26389E8ADD07307335B7692FC463EAD310871C54A6E90365E8A78FC27523B56
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

88034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\workspace\updater\bin\Release\Update.pdb

kernel32

FindNextFileW OpenMutexW CreateMutexW FindFirstFileW GetTempFileNameW HeapSize GetModuleHandleW GetModuleFileNameW ReadFile CloseHandle GetLastError GetCommandLineW CreateFileW SetStdHandle FormatMessageW WideCharToMultiByte CreateDirectoryW FindClose FindFirstFileExW GetFileAttributesExW GetFileInformationByHandle SetEndOfFile SetFilePointerEx CopyFileW CreateHardLinkW MultiByteToWideChar QueryPerformanceCounter SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW SetEnvironmentVariableW RemoveDirectoryW MoveFileExW DeleteFileW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetFileType GetFileSizeEx FlushFileBuffers GetConsoleCP GetConsoleMode HeapFree HeapAlloc ReadConsoleW GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation HeapReAlloc IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap WriteConsoleW

advapi32

CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW CryptGetHashParam

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_f7a0caa4d1cc03b3be3634a9d24d32c7_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

kernel32

advapi32

shell32

generic