General
- Target 2026-07-15_053bc38cff0fe6702e1617439c5b4377_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_magniber_medusalocker_njrat
- Size 7.8MB
- Sample260715-xr5h3sf14t
- SHA256 8762cb5d3949bff8006bb7afddb12665e99c220c120f14db514f0dd3592b339f
- MD5 053bc38cff0fe6702e1617439c5b4377
- SHA1 cc21e901141e0e9c1e2494d81698be5460c08797
- SHA512 117751b3f839530510a7d1de55dc833224ed2f7f356aafec5d870f7a6bb2fe0471237676417bd29778a10f7f19fd7b337c2684654aac7d73f0785865b47d91f8
- SSDEEP 196608:iDNCQMrdxB2/XmbZ8F8fRHXIEs0Tf7tT:iDNz8dm/XmV8CZH4h0Pt
- TLSH T1AF86194162D58064F1B22675697A2AB1467B7D215F38C8CFB68C6D1D0BB36D2E830F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_053bc38cff0fe6702e1617439c5b4377_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_l.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_053bc38cff0fe6702e1617439c5b4377_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_magniber_medusalocker_njrat
- Size 7.8MB
- SHA256 8762cb5d3949bff8006bb7afddb12665e99c220c120f14db514f0dd3592b339f
- MD5 053bc38cff0fe6702e1617439c5b4377
- SHA1 cc21e901141e0e9c1e2494d81698be5460c08797
- SHA512 117751b3f839530510a7d1de55dc833224ed2f7f356aafec5d870f7a6bb2fe0471237676417bd29778a10f7f19fd7b337c2684654aac7d73f0785865b47d91f8
- SSDEEP 196608:iDNCQMrdxB2/XmbZ8F8fRHXIEs0Tf7tT:iDNz8dm/XmV8CZH4h0Pt
- TLSH T1AF86194162D58064F1B22675697A2AB1467B7D215F38C8CFB68C6D1D0BB36D2E830F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1