eb588581cb72ad35246cf93614059e4b01fac8c8069ceb7a89ffa016fdb74d9a | Triage™

Login
Reports

Overview

overview

8

Static

static

3

2026-07-02...il.exe

windows10-2004-x64

8

2026-07-02...il.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-02_1d1adbc1426037026bcbf61452177ee0_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil
Size 2.8MB
Sample260702-wt9p5sgx2j
SHA256 eb588581cb72ad35246cf93614059e4b01fac8c8069ceb7a89ffa016fdb74d9a
MD5 1d1adbc1426037026bcbf61452177ee0
SHA1 1985f36913f9f0c17249031a543123078c9b1411
SHA512 36208f0bbb22c38fe93c0a0a5eeba6e96fbfafc69e9e32ee769c83d1e2705d913cec3d35332a3a8cf3e208f8ab4f30e9c0b12ad3e0f9f47acd41089a510db651
SSDEEP 49152:6sQqp8Ay5PMpaOjPufBp3ByKB33Ma67NreT6scPEWcylvJbaDmg27RnWGj:KquA8PQaOjPuZp3ByKB33Mx7Nrpst7D6
TLSH
T1D1D5CF12BA42C072E59201B452FA6B7FCC3AA934573485C397D01E7999312E37B3E79E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-02_1d1adbc1426037026bcbf61452177ee0_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Behavioral task

behavioral2

Sample

2026-07-02_1d1adbc1426037026bcbf61452177ee0_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil.exe

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Targets

- Target
  2026-07-02_1d1adbc1426037026bcbf61452177ee0_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 2.8MB
- SHA256 eb588581cb72ad35246cf93614059e4b01fac8c8069ceb7a89ffa016fdb74d9a
- MD5 1d1adbc1426037026bcbf61452177ee0
- SHA1 1985f36913f9f0c17249031a543123078c9b1411
- SHA512 36208f0bbb22c38fe93c0a0a5eeba6e96fbfafc69e9e32ee769c83d1e2705d913cec3d35332a3a8cf3e208f8ab4f30e9c0b12ad3e0f9f47acd41089a510db651
- SSDEEP 49152:6sQqp8Ay5PMpaOjPufBp3ByKB33Ma67NreT6scPEWcylvJbaDmg27RnWGj:KquA8PQaOjPuZp3ByKB33Mx7Nrpst7D6
- TLSH
  T1D1D5CF12BA42C072E59201B452FA6B7FCC3AA934573485C397D01E7999312E37B3E79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy