General
- Target 2026-07-08_21f101dd4ef79b2a2135167cc6638d73_amadey_avoslocker_blankgrabber_darkgate_elex_glassworm_helldown_luca-stealer_lynx_medusalocker_njrat_smoke-loader
- Size 9.7MB
- Sample260708-2kcxpsa15t
- SHA256 1d206af784e431362270dec2c3daf59799837b70d7599d86fe327cee92cb0aa4
- MD5 21f101dd4ef79b2a2135167cc6638d73
- SHA1 4c8fdc9011218ba488a1535e59d2bbed3e87d423
- SHA512 b66d01ea5d61be3f85106aff3d06c2261cdce4f873799580bad00ce26a5f54195d3d9bb264c624d5e3c11b00439410c928c7fd9131f7c06162b0ea8b254a5493
- SSDEEP 196608:Al3Nh1Z+SSkD2qHhlhRoHm5VhHQONsRP0tsQg5bRpX8R67X7rqN6uz:Al+YzBlh2Hm5VhHQBP0/g5b17rqNd
- TLSH T1EFA6CF23F651C43EC01E0230690FF7AA94BEAE700B764193ABE83E5D5E709D29577663
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_21f101dd4ef79b2a2135167cc6638d73_amadey_avoslocker_blankgrabber_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_21f101dd4ef79b2a2135167cc6638d73_amadey_avoslocker_blankgrabber_darkgate_elex_glassworm_h.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_21f101dd4ef79b2a2135167cc6638d73_amadey_avoslocker_blankgrabber_darkgate_elex_glassworm_helldown_luca-stealer_lynx_medusalocker_njrat_smoke-loader
- Size 9.7MB
- SHA256 1d206af784e431362270dec2c3daf59799837b70d7599d86fe327cee92cb0aa4
- MD5 21f101dd4ef79b2a2135167cc6638d73
- SHA1 4c8fdc9011218ba488a1535e59d2bbed3e87d423
- SHA512 b66d01ea5d61be3f85106aff3d06c2261cdce4f873799580bad00ce26a5f54195d3d9bb264c624d5e3c11b00439410c928c7fd9131f7c06162b0ea8b254a5493
- SSDEEP 196608:Al3Nh1Z+SSkD2qHhlhRoHm5VhHQONsRP0tsQg5bRpX8R67X7rqN6uz:Al+YzBlh2Hm5VhHQBP0/g5b17rqNd
- TLSH T1EFA6CF23F651C43EC01E0230690FF7AA94BEAE700B764193ABE83E5D5E709D29577663
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.