General
- Target 2026-07-10_fe06f92c8aa265b082d3ce81d30a63fe_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 14.3MB
- Sample260710-fm311sds5m
- SHA256 c1e38a84e85c19105f8e53ea15cb216701b1754b0a03fb7ba721ebf753ec6821
- MD5 fe06f92c8aa265b082d3ce81d30a63fe
- SHA1 b5078dbea6cc01cb4e8aa7e07f585e766888d3be
- SHA512 ad47443712a72bdaed4cfae47e6a1dc5341b99e2b017fc86166ac6e7f4b34201ee7f7b4a5b048aa9102be19612d47ef37a8a36eef66aa656d287d6364afb5c59
- SSDEEP 393216:YaRHZlDmAwyHfUThTH2UAc7DEJrzXh12+zVYEz:l+TND4H
- TLSH T18BE67C21BB454039E5A342B0893CA7BA526DBC311FB4C1CB72983B6D6DB46C25B31F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_fe06f92c8aa265b082d3ce81d30a63fe_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_fe06f92c8aa265b082d3ce81d30a63fe_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_fe06f92c8aa265b082d3ce81d30a63fe_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 14.3MB
- SHA256 c1e38a84e85c19105f8e53ea15cb216701b1754b0a03fb7ba721ebf753ec6821
- MD5 fe06f92c8aa265b082d3ce81d30a63fe
- SHA1 b5078dbea6cc01cb4e8aa7e07f585e766888d3be
- SHA512 ad47443712a72bdaed4cfae47e6a1dc5341b99e2b017fc86166ac6e7f4b34201ee7f7b4a5b048aa9102be19612d47ef37a8a36eef66aa656d287d6364afb5c59
- SSDEEP 393216:YaRHZlDmAwyHfUThTH2UAc7DEJrzXh12+zVYEz:l+TND4H
- TLSH T18BE67C21BB454039E5A342B0893CA7BA526DBC311FB4C1CB72983B6D6DB46C25B31F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.