General
- Target 2026-07-14_57200d266b5863219a774e4e5a853302_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat
- Size 1.5MB
- Sample260714-161p8aex5l
- SHA256 0fc9acc78fdd6f6c92dba231fe1e2ba4f329124ae714d2db56c01ba914a12dab
- MD5 57200d266b5863219a774e4e5a853302
- SHA1 089702ca920c0d5763208b68f0dfd73e41091e71
- SHA512 bafba4b8bdc0dd6aa93d314675c69eb568199c9580c60e108d888db496970acbf480e982999a649ac6a09866d2c5d1baec0f5f64422e6890d815073cc6a0b511
- SSDEEP 24576:3KP2pH7efRtJ3YeEAYOnwj1+M57Ef85PNMLasvqia:3KKe1YeEAYOW1+M5A83M+svqia
- TLSH T14975081177E95A29F1FB2B71AEB851604A7B7C615F31C7CF13802A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_57200d266b5863219a774e4e5a853302_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_57200d266b5863219a774e4e5a853302_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_57200d266b5863219a774e4e5a853302_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat
- Size 1.5MB
- SHA256 0fc9acc78fdd6f6c92dba231fe1e2ba4f329124ae714d2db56c01ba914a12dab
- MD5 57200d266b5863219a774e4e5a853302
- SHA1 089702ca920c0d5763208b68f0dfd73e41091e71
- SHA512 bafba4b8bdc0dd6aa93d314675c69eb568199c9580c60e108d888db496970acbf480e982999a649ac6a09866d2c5d1baec0f5f64422e6890d815073cc6a0b511
- SSDEEP 24576:3KP2pH7efRtJ3YeEAYOnwj1+M57Ef85PNMLasvqia:3KKe1YeEAYOW1+M5A83M+svqia
- TLSH T14975081177E95A29F1FB2B71AEB851604A7B7C615F31C7CF13802A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE