General
- Target 2026-05-29_044a5cf9f72f18c4cc5bb6ddc54e7666_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat_rhadamanthys
- Size 1.6MB
- Sample260529-qrf26acw4w
- SHA256 0d8848fdc6fefe4a4092c0c6809715d1961313737a7a959c5e94eea2b569c26d
- MD5 044a5cf9f72f18c4cc5bb6ddc54e7666
- SHA1 59be9a3fb0b6ea5f206b51b86d3957ccd48f4414
- SHA512 92184ff1a4d403d9f17a29e60585a56ef6c25332a69a0c049b9403ea45e396c5c5568a69e55cafa7ebb678f5a11e00fdfc47d06bc2a47231f190ce2fecad63f4
- SSDEEP 24576:qg8x+aIwBnuDCaGqEpkHGMXNk7DFO8HbkfFVEQa8EBb6pPtfmiuWXV:P8JuOkHGMXNoFO8Hk3Ezb6pPtfqiV
- TLSH T17B75181177E95A29F5FB2B31AEB851604A7BBC615F31C7CF13801A5E2934AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_044a5cf9f72f18c4cc5bb6ddc54e7666_amadey_avoslocker_darkgate_elex_hijackloader_luca-steale.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_044a5cf9f72f18c4cc5bb6ddc54e7666_amadey_avoslocker_darkgate_elex_hijackloader_luca-steale.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_044a5cf9f72f18c4cc5bb6ddc54e7666_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat_rhadamanthys
- Size 1.6MB
- SHA256 0d8848fdc6fefe4a4092c0c6809715d1961313737a7a959c5e94eea2b569c26d
- MD5 044a5cf9f72f18c4cc5bb6ddc54e7666
- SHA1 59be9a3fb0b6ea5f206b51b86d3957ccd48f4414
- SHA512 92184ff1a4d403d9f17a29e60585a56ef6c25332a69a0c049b9403ea45e396c5c5568a69e55cafa7ebb678f5a11e00fdfc47d06bc2a47231f190ce2fecad63f4
- SSDEEP 24576:qg8x+aIwBnuDCaGqEpkHGMXNk7DFO8HbkfFVEQa8EBb6pPtfmiuWXV:P8JuOkHGMXNoFO8Hk3Ezb6pPtfqiV
- TLSH T17B75181177E95A29F5FB2B31AEB851604A7BBC615F31C7CF13801A5E2934AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE