2026-07-09_5a6fc0c087eefc5d0e467bf1e6b47788_amadey_avoslocker_elex_luca-stealer_lynx_njrat

General

Target
2026-07-09_5a6fc0c087eefc5d0e467bf1e6b47788_amadey_avoslocker_elex_luca-stealer_lynx_njrat
Size 1.5MB
Sample260709-khd9baf18v
SHA256 a140a3fef6b846d956c2d78ea12966d9e2a18d6dec698057d9e528ba95b91e65
MD5 5a6fc0c087eefc5d0e467bf1e6b47788
SHA1 fa36ee7916331c6bc031a948b978e4db66bee7d4
SHA512 3a0bfe22591a5debf1c7ea24d0ac82f20d6609666e6da810e0e25114faa3a11099d48938e7f527c328d0830a06fffd08c4304a5d4f0f220d65717743f33caa0e
SSDEEP 24576:xBjc15dnso8Rh4YnDSlpPdHr9JTixKFy06IfWB:c1rsoInDGpPDJTikFtNf+
TLSH
T1AF7501107782C4B2D6A211324B79EB62CA2DBD204F2445D7A7C42F39DE343D1AE36F66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_5a6fc0c087eefc5d0e467bf1e6b47788_amadey_avoslocker_elex_luca-stealer_lynx_njrat

File Explorer

2026-07-09_5a6fc0c087eefc5d0e467bf1e6b47788_amadey_avoslocker_elex_luca-stealer_lynx_njrat

.exe 1.5MB

2026-07-09_5a6fc0c087eefc5d0e467bf1e6b47788_amadey_avoslocker_elex_luca-stealer_lynx_njrat

IMPHASH c557568ef6b6dad95e493a3617fdd291
SHA256 a140a3fef6b846d956c2d78ea12966d9e2a18d6dec698057d9e528ba95b91e65
MD5 5a6fc0c087eefc5d0e467bf1e6b47788
SHA1 fa36ee7916331c6bc031a948b978e4db66bee7d4
SHA512 3a0bfe22591a5debf1c7ea24d0ac82f20d6609666e6da810e0e25114faa3a11099d48938e7f527c328d0830a06fffd08c4304a5d4f0f220d65717743f33caa0e
SSDEEP 24576:xBjc15dnso8Rh4YnDSlpPdHr9JTixKFy06IfWB:c1rsoInDGpPDJTikFtNf+
TLSH
T1AF7501107782C4B2D6A211324B79EB62CA2DBD204F2445D7A7C42F39DE343D1AE36F66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

85424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\gocart-client-build\win-intel\build\gocartclient\public\gcclientlauncher\binaries\windows\release\Adobe Genuine Launcher.pdb

kernel32

GetCommandLineW DeleteFileW CreateProcessW GetTempPathW GetModuleFileNameW GetModuleHandleExW WriteConsoleW HeapSize SetEndOfFile GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetEnvironmentVariableA QueryPerformanceCounter MultiByteToWideChar WideCharToMultiByte OutputDebugStringA EnterCriticalSection LeaveCriticalSection InitializeCriticalSection CloseHandle DeleteCriticalSection WriteFile SetFilePointer CreateFileW GetCurrentThreadId FreeLibrary GetProcAddress ReadFile GetFileSizeEx GetLastError GetLocalTime GetTimeFormatW GetDateFormatW CreateMutexW WaitForSingleObject ReleaseMutex OpenMutexW GetStringTypeW EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent SetEvent ResetEvent WaitForSingleObjectEx IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead RaiseException RtlUnwind LoadLibraryExW GetDriveTypeW GetFileType GetFullPathNameW GetFileAttributesExW CreateDirectoryW MoveFileExW GetTimeZoneInformation ExitProcess GetStdHandle GetCommandLineA HeapFree GetConsoleMode ReadConsoleW SetFilePointerEx HeapAlloc GetCurrentDirectoryW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetStdHandle FlushFileBuffers GetConsoleCP HeapReAlloc

shell32

CommandLineToArgvW SHGetFolderPathW SHCreateDirectoryExW

shlwapi

PathRemoveExtensionW PathAppendW PathFindFileNameW PathFileExistsW PathAddExtensionW PathIsFileSpecW PathIsDirectoryW PathRenameExtensionW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-09_5a6fc0c087eefc5d0e467bf1e6b47788_amadey_avoslocker_elex_luca-stealer_lynx_njrat

kernel32

shell32

shlwapi

generic