General
- Target 2026-11-03_615a88350610db03872a4146beb40bbd_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 1.5MB
- Sample261104-xn9cvstyfz
- SHA256 f39c4d6d0a97f36da7bdb3d2f31843108456bd12ac62199e450dda8a4665d3c7
- MD5 615a88350610db03872a4146beb40bbd
- SHA1 5087ca7dbce6dd7018b729eadc980728a8e4de4b
- SHA512 fcd3669b1c0b1bee7e623e1d49b33bed9b6c52b200e425025ee0e8460d43497af6d5a67be88a5dc8d27f492018b18f2debda6d5a20c75c34ab00bda8c5d472f7
- SSDEEP 24576:2zwkTA3HsLI5I1KK2k0wfl8BYM/eNs27TCe:2kkTAXsLDNhfqBYbNs2
- TLSH T15465021175E1C432D673153208B8D770A67FBD700F218ABBA7D82E6EDE306D19A31A67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_615a88350610db03872a4146beb40bbd_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_615a88350610db03872a4146beb40bbd_amadey_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_615a88350610db03872a4146beb40bbd_amadey_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 1.5MB
- SHA256 f39c4d6d0a97f36da7bdb3d2f31843108456bd12ac62199e450dda8a4665d3c7
- MD5 615a88350610db03872a4146beb40bbd
- SHA1 5087ca7dbce6dd7018b729eadc980728a8e4de4b
- SHA512 fcd3669b1c0b1bee7e623e1d49b33bed9b6c52b200e425025ee0e8460d43497af6d5a67be88a5dc8d27f492018b18f2debda6d5a20c75c34ab00bda8c5d472f7
- SSDEEP 24576:2zwkTA3HsLI5I1KK2k0wfl8BYM/eNs27TCe:2kkTAXsLDNhfqBYbNs2
- TLSH T15465021175E1C432D673153208B8D770A67FBD700F218ABBA7D82E6EDE306D19A31A67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1