General
- Target 2026-04-18_b7ad4606d9e4ece86e7c38bff0314ffb_amadey_avoslocker_cobalt-strike_cryptbot_elex_luca-stealer_lynx_njrat
- Size 633KB
- Sample260418-e99xeagx7v
- SHA256 ae8b4c1d921eec004fc72329a9390b00b2cb170577bfa80dbfd2916e0d8956c2
- MD5 b7ad4606d9e4ece86e7c38bff0314ffb
- SHA1 0511f9341934360f63fb5b9ec26a0107fc6505e2
- SHA512 334cf0831abbf3d27f8c49ee2a2a820c91d0d6cc5f86be2ac88811ae8e3960f8efb2518c05b82cd4b8be29b860cd384ad47517fe39a7d1d43b4bef1274a07a53
- SSDEEP 12288:u6bXAh5glNu042nPAnFosGSutfIwPk2K7g5oW6S8Ky7kwSs3cGU48pNuWR01HEyD:pnP5ohS8z7BSBGU48pAWRkTqne38K1zP
- TLSH T1D5D4AE23F5A1807AD132143016AAAB314DFFFA21097199DB67C8189C5F716E1AE3F367
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-18_b7ad4606d9e4ece86e7c38bff0314ffb_amadey_avoslocker_cobalt-strike_cryptbot_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
cryptbot
C2
-
diigerre03.top
Attributes
-
payload_url
http://dfgggloadg02.top/download.php?file=lv.exe
Targets
-
- Target 2026-04-18_b7ad4606d9e4ece86e7c38bff0314ffb_amadey_avoslocker_cobalt-strike_cryptbot_elex_luca-stealer_lynx_njrat
- Size 633KB
- SHA256 ae8b4c1d921eec004fc72329a9390b00b2cb170577bfa80dbfd2916e0d8956c2
- MD5 b7ad4606d9e4ece86e7c38bff0314ffb
- SHA1 0511f9341934360f63fb5b9ec26a0107fc6505e2
- SHA512 334cf0831abbf3d27f8c49ee2a2a820c91d0d6cc5f86be2ac88811ae8e3960f8efb2518c05b82cd4b8be29b860cd384ad47517fe39a7d1d43b4bef1274a07a53
- SSDEEP 12288:u6bXAh5glNu042nPAnFosGSutfIwPk2K7g5oW6S8Ky7kwSs3cGU48pNuWR01HEyD:pnP5ohS8z7BSBGU48pAWRkTqne38K1zP
- TLSH T1D5D4AE23F5A1807AD132143016AAAB314DFFFA21097199DB67C8189C5F716E1AE3F367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.