General
- Target 2026-08-03_501ed14ba8dba905461aa1aa308a306d_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat
- Size 1.5MB
- Sample260804-n6tkpadr6v
- SHA256 d2275c3108c69d03925d2c90d0e3260575bf05db7a8eed47791168044cbd4a2f
- MD5 501ed14ba8dba905461aa1aa308a306d
- SHA1 a993debf91c8acf673e377e4be30fa7438d073de
- SHA512 ee27103ac91ab9b0178bab7065662dbe4c9b4a6ad81fae585d81effe2714733b56bee7bb5f529a4b857f04fb1f26dcb2f5a574b50f66459a705121485b3e3310
- SSDEEP 24576:3KP2pH7efRtJ3YeEAYOnwj1+M57Ef85PNMLasvqia:3KKe1YeEAYOW1+M5A83M+svqia
- TLSH T1EE75081177E95A29F1FB2B71AEB851604A7B7C615F31C7CF13802A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_501ed14ba8dba905461aa1aa308a306d_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_501ed14ba8dba905461aa1aa308a306d_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_501ed14ba8dba905461aa1aa308a306d_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat
- Size 1.5MB
- SHA256 d2275c3108c69d03925d2c90d0e3260575bf05db7a8eed47791168044cbd4a2f
- MD5 501ed14ba8dba905461aa1aa308a306d
- SHA1 a993debf91c8acf673e377e4be30fa7438d073de
- SHA512 ee27103ac91ab9b0178bab7065662dbe4c9b4a6ad81fae585d81effe2714733b56bee7bb5f529a4b857f04fb1f26dcb2f5a574b50f66459a705121485b3e3310
- SSDEEP 24576:3KP2pH7efRtJ3YeEAYOnwj1+M57Ef85PNMLasvqia:3KKe1YeEAYOW1+M5A83M+svqia
- TLSH T1EE75081177E95A29F1FB2B71AEB851604A7B7C615F31C7CF13802A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE