2026-11-03_439eea54b742add63dc36fce38f1d8ff_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

General

Target
2026-11-03_439eea54b742add63dc36fce38f1d8ff_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
Size 1.3MB
Sample261104-2a9tpaz19r
SHA256 d9c37632b0bc9a06734accceac6b99132ff5f5a04e2aee6b2ea21089e3d95456
MD5 439eea54b742add63dc36fce38f1d8ff
SHA1 67cf535cf0b6d15fbcded021780be2b986ae3e50
SHA512 9d6c69839500aad9152f6b70d2b97d7e0c06a1110d8263ce1b6a91220635723fa43bc9d701c4e6d3f52fbf1ed493df2bb31f581b33f3526556259c110b37ce9b
SSDEEP 24576:CE6UbolcBJgYxT5WexsqjnhMgeiCl7G0nehbGZpbD:sdlcLgUweFDmg27RnWGj
TLSH
T1F45558F26389E8ADD07307335B7692FC863EAD304831C55A6E90365D9A78FC27523B52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_439eea54b742add63dc36fce38f1d8ff_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-11-03_439eea54b742add63dc36fce38f1d8ff_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 1.3MB

2026-11-03_439eea54b742add63dc36fce38f1d8ff_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 5950a73bd89d5f0762988fe4a394f6ab
SHA256 d9c37632b0bc9a06734accceac6b99132ff5f5a04e2aee6b2ea21089e3d95456
MD5 439eea54b742add63dc36fce38f1d8ff
SHA1 67cf535cf0b6d15fbcded021780be2b986ae3e50
SHA512 9d6c69839500aad9152f6b70d2b97d7e0c06a1110d8263ce1b6a91220635723fa43bc9d701c4e6d3f52fbf1ed493df2bb31f581b33f3526556259c110b37ce9b
SSDEEP 24576:CE6UbolcBJgYxT5WexsqjnhMgeiCl7G0nehbGZpbD:sdlcLgUweFDmg27RnWGj
TLSH
T1F45558F26389E8ADD07307335B7692FC863EAD304831C55A6E90365D9A78FC27523B52
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

88034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\workspace\updater\bin\Release\Update.pdb

kernel32

FindNextFileW OpenMutexW CreateMutexW FindFirstFileW GetTempFileNameW HeapSize GetModuleHandleW GetModuleFileNameW ReadFile CloseHandle GetLastError GetCommandLineW CreateFileW SetStdHandle FormatMessageW WideCharToMultiByte CreateDirectoryW FindClose FindFirstFileExW GetFileAttributesExW GetFileInformationByHandle SetEndOfFile SetFilePointerEx CopyFileW CreateHardLinkW MultiByteToWideChar QueryPerformanceCounter SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW SetEnvironmentVariableW RemoveDirectoryW MoveFileExW DeleteFileW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetFileType GetFileSizeEx FlushFileBuffers GetConsoleCP GetConsoleMode HeapFree HeapAlloc ReadConsoleW GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation HeapReAlloc IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap WriteConsoleW

advapi32

CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW CryptGetHashParam

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_439eea54b742add63dc36fce38f1d8ff_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

kernel32

advapi32

shell32

generic