2026-11-03_41c01ab0dcdec4a2e7ab4f05712fb42a_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

General

Target
2026-11-03_41c01ab0dcdec4a2e7ab4f05712fb42a_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
Size 1.3MB
Sample261104-2jfbfavybx
SHA256 d57895b9ef4fa33398ae8f65345b6816f9bf78de48c1b81e4d43804da660d2b2
MD5 41c01ab0dcdec4a2e7ab4f05712fb42a
SHA1 9d4f2f3ab27dae4bda9f4647e7b43a46ffdffcde
SHA512 a22d7820f32d318f9007dbf4b74562485a6e3d9407e10f11b0c6a3c0272e36e3802d0bba0d400ebca0fa017879ebec0af431ff06ad0db89ec499446492d79746
SSDEEP 24576:tE6UbolcBJgYxT5WeI+dicaamo0sCBxbtbNQ0jJ+9Ms5T:zdlcLgUweIY9aFTtbNQ014Ms
TLSH
T17B5558F26389E8ADD07303331B7692FC863EAC301871D51A6E94765D8A79FC27523B52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_41c01ab0dcdec4a2e7ab4f05712fb42a_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-11-03_41c01ab0dcdec4a2e7ab4f05712fb42a_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 1.3MB

2026-11-03_41c01ab0dcdec4a2e7ab4f05712fb42a_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 5950a73bd89d5f0762988fe4a394f6ab
SHA256 d57895b9ef4fa33398ae8f65345b6816f9bf78de48c1b81e4d43804da660d2b2
MD5 41c01ab0dcdec4a2e7ab4f05712fb42a
SHA1 9d4f2f3ab27dae4bda9f4647e7b43a46ffdffcde
SHA512 a22d7820f32d318f9007dbf4b74562485a6e3d9407e10f11b0c6a3c0272e36e3802d0bba0d400ebca0fa017879ebec0af431ff06ad0db89ec499446492d79746
SSDEEP 24576:tE6UbolcBJgYxT5WeI+dicaamo0sCBxbtbNQ0jJ+9Ms5T:zdlcLgUweIY9aFTtbNQ014Ms
TLSH
T17B5558F26389E8ADD07303331B7692FC863EAC301871D51A6E94765D8A79FC27523B52
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

88034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\workspace\updater\bin\Release\Update.pdb

kernel32

FindNextFileW OpenMutexW CreateMutexW FindFirstFileW GetTempFileNameW HeapSize GetModuleHandleW GetModuleFileNameW ReadFile CloseHandle GetLastError GetCommandLineW CreateFileW SetStdHandle FormatMessageW WideCharToMultiByte CreateDirectoryW FindClose FindFirstFileExW GetFileAttributesExW GetFileInformationByHandle SetEndOfFile SetFilePointerEx CopyFileW CreateHardLinkW MultiByteToWideChar QueryPerformanceCounter SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW SetEnvironmentVariableW RemoveDirectoryW MoveFileExW DeleteFileW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetFileType GetFileSizeEx FlushFileBuffers GetConsoleCP GetConsoleMode HeapFree HeapAlloc ReadConsoleW GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation HeapReAlloc IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap WriteConsoleW

advapi32

CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW CryptGetHashParam

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_41c01ab0dcdec4a2e7ab4f05712fb42a_amadey_elex_luca-stealer_lynx_njrat_smoke-loader

kernel32

advapi32

shell32

generic