General
- Target 2026-07-08_489a4fe4e8c5c692b2c0f1861f1060c4_amadey_avoslocker_elex_luca-stealer_lynx_njrat
- Size 7.9MB
- Sample260708-2e76nah13q
- SHA256 fbbf976738ea07cbe3860141e62e787bafb721a33a5a41c038e853c8809ead7b
- MD5 489a4fe4e8c5c692b2c0f1861f1060c4
- SHA1 16bc0937ce36e0e4b69aaec6c93ad180cc3049aa
- SHA512 8431b2bce3dab64ec680174475b0cc58e91d052aae63d3f3a741e11d893b0ae17d710499f0fa47c1274b32675608542beda38f63869731ba14435b63d320ecda
- SSDEEP 196608:THBks/aTODF4wK7vwLyNRHRWcfbQAIxf9IKZ:THBksSTOawLyNlRR0AIx9Ig
- TLSH T139863311B6B1D0F6F29101700BB9E2FA59397D201F015AEB63E4BEA95E787C06A31737
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-08_489a4fe4e8c5c692b2c0f1861f1060c4_amadey_avoslocker_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_489a4fe4e8c5c692b2c0f1861f1060c4_amadey_avoslocker_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_489a4fe4e8c5c692b2c0f1861f1060c4_amadey_avoslocker_elex_luca-stealer_lynx_njrat
- Size 7.9MB
- SHA256 fbbf976738ea07cbe3860141e62e787bafb721a33a5a41c038e853c8809ead7b
- MD5 489a4fe4e8c5c692b2c0f1861f1060c4
- SHA1 16bc0937ce36e0e4b69aaec6c93ad180cc3049aa
- SHA512 8431b2bce3dab64ec680174475b0cc58e91d052aae63d3f3a741e11d893b0ae17d710499f0fa47c1274b32675608542beda38f63869731ba14435b63d320ecda
- SSDEEP 196608:THBks/aTODF4wK7vwLyNRHRWcfbQAIxf9IKZ:THBksSTOawLyNlRR0AIx9Ig
- TLSH T139863311B6B1D0F6F29101700BB9E2FA59397D201F015AEB63E4BEA95E787C06A31737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1