General
- Target 2026-07-19_78576283e4fd41ce596bf05b904fb381_amadey_avoslocker_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil_smoke-loader
- Size 2.7MB
- Sample260719-13ptjsdx6q
- SHA256 2b366d1cdc0382c14f4a4c382a943d7e1f2d3f761d1af79f0b3a0cd48741870c
- MD5 78576283e4fd41ce596bf05b904fb381
- SHA1 04760bc0ecf793c79dc679a7e14cbf6ceef99afb
- SHA512 78a3fb67e88cee716df11daa832c6abd4ff491578e0447aeeef264898f1dbe24324adceb27d75c8d185d15bd1a79fbb05d7752288c4421ebf43ea008e90e5797
- SSDEEP 49152:HKHy0KeHTGqrU1gOkASYYACC9DkYPcTQ+jl2B7Ulw+Yc+qF+Z:HKMcTPrU1g3ASYYACC6zkof
- TLSH T1F6D5B0127745ACB3E4B20534E37F97FBC63D99200325C5D7A3D01AA889292D3773AB96
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_78576283e4fd41ce596bf05b904fb381_amadey_avoslocker_elex_glassworm_luca-stealer_lynx_medus.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_78576283e4fd41ce596bf05b904fb381_amadey_avoslocker_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil_smoke-loader
- Size 2.7MB
- SHA256 2b366d1cdc0382c14f4a4c382a943d7e1f2d3f761d1af79f0b3a0cd48741870c
- MD5 78576283e4fd41ce596bf05b904fb381
- SHA1 04760bc0ecf793c79dc679a7e14cbf6ceef99afb
- SHA512 78a3fb67e88cee716df11daa832c6abd4ff491578e0447aeeef264898f1dbe24324adceb27d75c8d185d15bd1a79fbb05d7752288c4421ebf43ea008e90e5797
- SSDEEP 49152:HKHy0KeHTGqrU1gOkASYYACC9DkYPcTQ+jl2B7Ulw+Yc+qF+Z:HKMcTPrU1g3ASYYACC6zkof
- TLSH T1F6D5B0127745ACB3E4B20534E37F97FBC63D99200325C5D7A3D01AA889292D3773AB96
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1