General
- Target 2026-07-23_1a7cd703f52829d4639333ec972f8f18_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260723-dbyk2sdj81
- SHA256 ed107b2684aad62d564ef378e8b06616ac5e41c71ba544304d91befb3552d738
- MD5 1a7cd703f52829d4639333ec972f8f18
- SHA1 059f894a7faef69f3cd826664e6d8a98f00ebd95
- SHA512 190ab30d56d297139c19c4adb48f858a84199793baa19fa69a8f9b3774dd71362d5d6335a8b9f9a87976cd6afcbb2caf3f7693caf443d64a6c573ac13681885a
- SSDEEP 49152:QOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/o:QOU/jIEeQfoR/IuOFVjUu5W
- TLSH T12CB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_1a7cd703f52829d4639333ec972f8f18_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_1a7cd703f52829d4639333ec972f8f18_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 ed107b2684aad62d564ef378e8b06616ac5e41c71ba544304d91befb3552d738
- MD5 1a7cd703f52829d4639333ec972f8f18
- SHA1 059f894a7faef69f3cd826664e6d8a98f00ebd95
- SHA512 190ab30d56d297139c19c4adb48f858a84199793baa19fa69a8f9b3774dd71362d5d6335a8b9f9a87976cd6afcbb2caf3f7693caf443d64a6c573ac13681885a
- SSDEEP 49152:QOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/o:QOU/jIEeQfoR/IuOFVjUu5W
- TLSH T12CB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.