General
- Target 2026-07-27_d74592c3f09e18833ea36ccf28017354_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260727-a16feafl41
- SHA256 aed50cdefd94592ff78a9c9e2c7dffbf19523d1e6f87e23ca1ad701f3d110f2c
- MD5 d74592c3f09e18833ea36ccf28017354
- SHA1 8248fb802b796ebe64b11f5a56b6fbae1b45c414
- SHA512 79c6db6ee8e089f935131715530369ed6a1d4388e5624cbb5b3e447806c1b1583299a33e993cf07d2b6eb660038d92f1e8e251aabc30dcd1a5ab798877731f0d
- SSDEEP 49152:eOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/f:eOU/jIEeQfoR/IuOFVjUu5l
- TLSH T1B6B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_d74592c3f09e18833ea36ccf28017354_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_d74592c3f09e18833ea36ccf28017354_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 aed50cdefd94592ff78a9c9e2c7dffbf19523d1e6f87e23ca1ad701f3d110f2c
- MD5 d74592c3f09e18833ea36ccf28017354
- SHA1 8248fb802b796ebe64b11f5a56b6fbae1b45c414
- SHA512 79c6db6ee8e089f935131715530369ed6a1d4388e5624cbb5b3e447806c1b1583299a33e993cf07d2b6eb660038d92f1e8e251aabc30dcd1a5ab798877731f0d
- SSDEEP 49152:eOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/f:eOU/jIEeQfoR/IuOFVjUu5l
- TLSH T1B6B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.