General
- Target 2026-07-19_d8f61c06fc9a58202011a1e0915c71f6_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat
- Size 1.5MB
- Sample260719-w7hhtagz6n
- SHA256 fd3984446e41d1a23c23421315bd7e48c043b343e233c02f46aa47636cbcc65e
- MD5 d8f61c06fc9a58202011a1e0915c71f6
- SHA1 a7943661f1215fc053059cc36c4b42ef0549b5d3
- SHA512 0ea253a819f124d3a22b4fc84ef02cf2896d6b9f8559634eeac32102d7df9c8412f9b050f3ea2ef25a10c9b0f1b083bc2faf6a89337122e6e5e47aeb0c14508c
- SSDEEP 24576:3KP2pH7efRtJ3YeEAYOnwj1+M57Ef85PNMLasvqia:3KKe1YeEAYOW1+M5A83M+svqia
- TLSH T17B75081177E95A29F1FB2B71AEB851604A7B7C615F31C7CF13802A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_d8f61c06fc9a58202011a1e0915c71f6_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_d8f61c06fc9a58202011a1e0915c71f6_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_d8f61c06fc9a58202011a1e0915c71f6_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat
- Size 1.5MB
- SHA256 fd3984446e41d1a23c23421315bd7e48c043b343e233c02f46aa47636cbcc65e
- MD5 d8f61c06fc9a58202011a1e0915c71f6
- SHA1 a7943661f1215fc053059cc36c4b42ef0549b5d3
- SHA512 0ea253a819f124d3a22b4fc84ef02cf2896d6b9f8559634eeac32102d7df9c8412f9b050f3ea2ef25a10c9b0f1b083bc2faf6a89337122e6e5e47aeb0c14508c
- SSDEEP 24576:3KP2pH7efRtJ3YeEAYOnwj1+M57Ef85PNMLasvqia:3KKe1YeEAYOW1+M5A83M+svqia
- TLSH T17B75081177E95A29F1FB2B71AEB851604A7B7C615F31C7CF13802A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE