General
- Target 2026-07-21_07b26b0ea803d747698f177d4503270e_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260721-b3qcmsdv5y
- SHA256 5c63322ed6d6b30478c652c0872a20d20a0f66eaf7b69ede58771331eb896a07
- MD5 07b26b0ea803d747698f177d4503270e
- SHA1 dd1a8c3b780cd36591c40f40d67bf8efb029511e
- SHA512 c8caee1e2b098a6dc19ac027799578cad5b51329dd7b1c64d161611eed0d5f252931dbd35b8a10247e09ef0f60d2e13bde3786061772a436084a2374c697dc4c
- SSDEEP 49152:lOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/1:lOU/jIEeQfoR/IuOFVjUu57
- TLSH T145B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_07b26b0ea803d747698f177d4503270e_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_07b26b0ea803d747698f177d4503270e_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 5c63322ed6d6b30478c652c0872a20d20a0f66eaf7b69ede58771331eb896a07
- MD5 07b26b0ea803d747698f177d4503270e
- SHA1 dd1a8c3b780cd36591c40f40d67bf8efb029511e
- SHA512 c8caee1e2b098a6dc19ac027799578cad5b51329dd7b1c64d161611eed0d5f252931dbd35b8a10247e09ef0f60d2e13bde3786061772a436084a2374c697dc4c
- SSDEEP 49152:lOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/1:lOU/jIEeQfoR/IuOFVjUu57
- TLSH T145B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.