General
- Target 2026-07-15_5914eeafc28f03b431b52d24f1485904_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat
- Size 1.5MB
- Sample260715-dbywtac17z
- SHA256 50cecac66f6cff17b0163b6da0354fce691fe4db60187556159e4cd112b55848
- MD5 5914eeafc28f03b431b52d24f1485904
- SHA1 37f35ee79073dcad34ba033e60c6d2ad33fc8484
- SHA512 d5899b908f9a986c476ad73c1faab4d001720bf6fb0e9fb66856799a48647cf2ce052b0d658fac3f618b3e17ee08f7176e6d8a02e4bc96229251b5a8ce5526d8
- SSDEEP 24576:3KP2pH7efRtJ3YeEAYOnwj1+M57Ef85PNMLasvqiaO:3KKe1YeEAYOW1+M5A83M+svqiaO
- TLSH T10675081177E95A29F1FB2B71AEB851604A7B7C615F31C7CF13802A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_5914eeafc28f03b431b52d24f1485904_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_5914eeafc28f03b431b52d24f1485904_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_5914eeafc28f03b431b52d24f1485904_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat
- Size 1.5MB
- SHA256 50cecac66f6cff17b0163b6da0354fce691fe4db60187556159e4cd112b55848
- MD5 5914eeafc28f03b431b52d24f1485904
- SHA1 37f35ee79073dcad34ba033e60c6d2ad33fc8484
- SHA512 d5899b908f9a986c476ad73c1faab4d001720bf6fb0e9fb66856799a48647cf2ce052b0d658fac3f618b3e17ee08f7176e6d8a02e4bc96229251b5a8ce5526d8
- SSDEEP 24576:3KP2pH7efRtJ3YeEAYOnwj1+M57Ef85PNMLasvqiaO:3KKe1YeEAYOW1+M5A83M+svqiaO
- TLSH T10675081177E95A29F1FB2B71AEB851604A7B7C615F31C7CF13802A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE