2026-11-01_d8ba60d72e73873a201b72e3bd8729c8_amadey_elex_luca-stealer_lynx_njrat

General

Target
2026-11-01_d8ba60d72e73873a201b72e3bd8729c8_amadey_elex_luca-stealer_lynx_njrat
Size 4.1MB
Sample261102-hsf5jsfy6v
SHA256 eefc28253a112fef52034714550c02caf447b13000845f79882df164d9da1232
MD5 d8ba60d72e73873a201b72e3bd8729c8
SHA1 5f5232555d0bf7ab1140059ef34523862ebb8833
SHA512 0f578a8f872b1759f1f2c6ccb6578de92b0990da3432aa896f645bfae3635919d559581f040956ab4c1130f3a7bf893e7ca3699a6af4a30d1fbcc9a64f8f1d68
SSDEEP 49152:1WpDuHdzUMcaNs/qHIhMTJ4NJgXdreFgUk/P3NB/c5KgGRw+WChDmg27RnWGj:srqHMMTJiZg3oKgsSiD527BWG
TLSH
T1DE162B22F7520DF2C99340B0CD7A6B72CB5AAC780BF107B37B72561EA4796C13525B4A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_d8ba60d72e73873a201b72e3bd8729c8_amadey_elex_luca-stealer_lynx_njrat

File Explorer

2026-11-01_d8ba60d72e73873a201b72e3bd8729c8_amadey_elex_luca-stealer_lynx_njrat

.exe 4.1MB

2026-11-01_d8ba60d72e73873a201b72e3bd8729c8_amadey_elex_luca-stealer_lynx_njrat

IMPHASH f4b090df63a8ca3b666a215f36f78a6b
SHA256 eefc28253a112fef52034714550c02caf447b13000845f79882df164d9da1232
MD5 d8ba60d72e73873a201b72e3bd8729c8
SHA1 5f5232555d0bf7ab1140059ef34523862ebb8833
SHA512 0f578a8f872b1759f1f2c6ccb6578de92b0990da3432aa896f645bfae3635919d559581f040956ab4c1130f3a7bf893e7ca3699a6af4a30d1fbcc9a64f8f1d68
SSDEEP 49152:1WpDuHdzUMcaNs/qHIhMTJ4NJgXdreFgUk/P3NB/c5KgGRw+WChDmg27RnWGj:srqHMMTJiZg3oKgsSiD527BWG
TLSH
T1DE162B22F7520DF2C99340B0CD7A6B72CB5AAC780BF107B37B72561EA4796C13525B4A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

240784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dvs\p4\build\sw\rel\gpu_drv\r615\r616_41\drivers\nvcamera\redist\_out\wddm2_x86_release\NvImageConvert32.pdb

shlwapi

PathFindExtensionA

windowscodecs

WICConvertBitmapSource

kernel32

LoadLibraryExW IsProcessorFeaturePresent CreateFileA CreateFileW GetFileSize CloseHandle CreateFileMappingW MapViewOfFile UnmapViewOfFile DecodePointer GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection FormatMessageA WideCharToMultiByte WaitForSingleObjectEx SwitchToThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx LocalFree GetLocaleInfoEx EncodePointer LCMapStringEx QueryPerformanceCounter ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetStringTypeW CompareStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW OutputDebugStringW RaiseException RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc HeapSize GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap WriteConsoleW SetEndOfFile DeleteFileW LocalAlloc lstrlenA ReplaceFileW InitializeCriticalSection DebugBreak ReleaseSemaphore WaitForSingleObject CreateSemaphoreA

ole32

CoInitializeEx CoCreateInstance CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_d8ba60d72e73873a201b72e3bd8729c8_amadey_elex_luca-stealer_lynx_njrat

shlwapi

windowscodecs

kernel32

ole32

generic