General
- Target 2026-07-01_a443b42a9a2f51d1fe1dd7e2619601d2_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 1.6MB
- Sample260701-31p3msfz7l
- SHA256 fab9c467cca6b669f15fcc2f8d2a87f97fda308c9a5d34bbf0216d5f2a65ee4b
- MD5 a443b42a9a2f51d1fe1dd7e2619601d2
- SHA1 582a13e6db9c5ef5435c0c5f0f07d30d6a7f2f97
- SHA512 69ac38127db9276e022d9db4312ebac762ad974544b8855c2b9db78bc7365f28d224c6cecb2c05b8d7b372be579baa14b400462731395c2cd859499ea017e59d
- SSDEEP 49152:Issssq7a5ExV/XgUOWviw3yLsqLNtFsFhD3l77luRn2:pQzWKw3ygQNMzl7JuRn
- TLSH T13B75BF22B902C473E6E200B1A279CFF29D6CA570577650D3E7D01E7999209C3773DB9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_a443b42a9a2f51d1fe1dd7e2619601d2_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_a443b42a9a2f51d1fe1dd7e2619601d2_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 1.6MB
- SHA256 fab9c467cca6b669f15fcc2f8d2a87f97fda308c9a5d34bbf0216d5f2a65ee4b
- MD5 a443b42a9a2f51d1fe1dd7e2619601d2
- SHA1 582a13e6db9c5ef5435c0c5f0f07d30d6a7f2f97
- SHA512 69ac38127db9276e022d9db4312ebac762ad974544b8855c2b9db78bc7365f28d224c6cecb2c05b8d7b372be579baa14b400462731395c2cd859499ea017e59d
- SSDEEP 49152:Issssq7a5ExV/XgUOWviw3yLsqLNtFsFhD3l77luRn2:pQzWKw3ygQNMzl7JuRn
- TLSH T13B75BF22B902C473E6E200B1A279CFF29D6CA570577650D3E7D01E7999209C3773DB9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1