General
- Target 2026-07-03_1f2b9dcde59762edeb5f4df82a454d05_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat
- Size 6.0MB
- Sample260703-nerl1scz3n
- SHA256 e190fcfc2d1ce335d95926e17c44c5af5f195969a5056f1dc09523e3636f01f3
- MD5 1f2b9dcde59762edeb5f4df82a454d05
- SHA1 6b66d10eeab338a2ba7a1329b0667b948f465092
- SHA512 38282744e8ee064a676cea4192dd55142d0c52729ee8acda4d2f89a1c05768a882e73e7f71369e6c920df517a482dc7f10dedfc7fc697d8e2b8a077a1b9cc923
- SSDEEP 98304:QAOi2nSR7oQr4TNR3f/rTRmi/moWIay6FXeMPR:QAOibiQcNRXX56fPP
- TLSH T1445629916256C42AE0DB1B70E92D6FFF806AEE31C72154CB62813D1E7CB41D6173EA27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_1f2b9dcde59762edeb5f4df82a454d05_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_1f2b9dcde59762edeb5f4df82a454d05_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_1f2b9dcde59762edeb5f4df82a454d05_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat
- Size 6.0MB
- SHA256 e190fcfc2d1ce335d95926e17c44c5af5f195969a5056f1dc09523e3636f01f3
- MD5 1f2b9dcde59762edeb5f4df82a454d05
- SHA1 6b66d10eeab338a2ba7a1329b0667b948f465092
- SHA512 38282744e8ee064a676cea4192dd55142d0c52729ee8acda4d2f89a1c05768a882e73e7f71369e6c920df517a482dc7f10dedfc7fc697d8e2b8a077a1b9cc923
- SSDEEP 98304:QAOi2nSR7oQr4TNR3f/rTRmi/moWIay6FXeMPR:QAOibiQcNRXX56fPP
- TLSH T1445629916256C42AE0DB1B70E92D6FFF806AEE31C72154CB62813D1E7CB41D6173EA27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.