General
- Target 2026-06-29_b43f207ef34f321d5263ddb1e7b0c523_amadey_avoslocker_coinminer_elex_graphican_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 1.2MB
- Sample260630-e9wd1sfs2q
- SHA256 59f74e472e5481cafbd4d8a7923e1eb747531b74b90c60913e877660f42de981
- MD5 b43f207ef34f321d5263ddb1e7b0c523
- SHA1 a338c00fae4539eac623d0ed666d4da677a04dec
- SHA512 702813ce2c0150f7deec6f858e81c533e4bb4a94a5165f4668c9bde0e7c31bf04c4f8d54d67f70ecbed4c765f798c62f57fb7b158b69e6646ab170a54a04f7d4
- SSDEEP 24576:54zcroCtdwwSAOdI9KaM1S9s2V4HJl0vwMNyBo4kx929bL3Hnx:54zcrxSAOTaM1P2VIQwXB+kn3Hnx
- TLSH T18645DF2179A1C036E2721330193EDB91957ABC714F3286CFA3E07A3D5975AD25A21B3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_b43f207ef34f321d5263ddb1e7b0c523_amadey_avoslocker_coinminer_elex_graphican_luca-stealer_.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_b43f207ef34f321d5263ddb1e7b0c523_amadey_avoslocker_coinminer_elex_graphican_luca-stealer_.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_b43f207ef34f321d5263ddb1e7b0c523_amadey_avoslocker_coinminer_elex_graphican_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 1.2MB
- SHA256 59f74e472e5481cafbd4d8a7923e1eb747531b74b90c60913e877660f42de981
- MD5 b43f207ef34f321d5263ddb1e7b0c523
- SHA1 a338c00fae4539eac623d0ed666d4da677a04dec
- SHA512 702813ce2c0150f7deec6f858e81c533e4bb4a94a5165f4668c9bde0e7c31bf04c4f8d54d67f70ecbed4c765f798c62f57fb7b158b69e6646ab170a54a04f7d4
- SSDEEP 24576:54zcroCtdwwSAOdI9KaM1S9s2V4HJl0vwMNyBo4kx929bL3Hnx:54zcrxSAOTaM1P2VIQwXB+kn3Hnx
- TLSH T18645DF2179A1C036E2721330193EDB91957ABC714F3286CFA3E07A3D5975AD25A21B3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger