General
- Target 2026-07-14_37383e2cdd69c3f0240343479741436f_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260714-err9msgs8y
- SHA256 c944bec96f158cb24ff3e775b05664192767743905b2229ae7092c91cc06041e
- MD5 37383e2cdd69c3f0240343479741436f
- SHA1 831baddd04ec053f7b073e6cde451f8c94b415d0
- SHA512 6261740499b4d492f0666efa6e4f314e1a38dde2d5107245be02edd334925e9fd8113bd647f650b1bbc18c45e3d1853d84f7fbc3e5aaddc9d89a8be205765be8
- SSDEEP 49152:2fU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:2fU/jIEeQfoR/IuOFVjUu5
- TLSH T1E1B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C1CA32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_37383e2cdd69c3f0240343479741436f_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_37383e2cdd69c3f0240343479741436f_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 c944bec96f158cb24ff3e775b05664192767743905b2229ae7092c91cc06041e
- MD5 37383e2cdd69c3f0240343479741436f
- SHA1 831baddd04ec053f7b073e6cde451f8c94b415d0
- SHA512 6261740499b4d492f0666efa6e4f314e1a38dde2d5107245be02edd334925e9fd8113bd647f650b1bbc18c45e3d1853d84f7fbc3e5aaddc9d89a8be205765be8
- SSDEEP 49152:2fU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:2fU/jIEeQfoR/IuOFVjUu5
- TLSH T1E1B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C1CA32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.