General
- Target 2026-08-04_583fcaa039195a9eb77d9979b79a93e5_amadey_avoslocker_elex_luca-stealer_lynx_njrat
- Size 1.4MB
- Sample260804-yxwnssxtgz
- SHA256 481feb4d92313271fd58907888c70de3e2de0bb9850e1b69d0a4ba59dafd3e25
- MD5 583fcaa039195a9eb77d9979b79a93e5
- SHA1 7319734290731841526013b095e92f5b41e8d938
- SHA512 bab561627f3e2ca5a8fe1dcccf57d2a950e8a47e7ba9c0b327691769f1f21d2893e70ed579c67874f02db267e15f3ad5982d538693d9be0cc7e65495d2e0a83f
- SSDEEP 24576:8kqwgC+YzRM0jrf5dNlxw13hJh3WEi7nTT7ZCyTfaWp5SaTQzSPVqcB5fYXfVtvg:8kqSNlx4L327ZCyTWSgcB5gNt6wK09KH
- TLSH T14965D020F940D032D9E120B686BDE6B26C6D6C32171559CBF3D419B72E70EC26B3966F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_583fcaa039195a9eb77d9979b79a93e5_amadey_avoslocker_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_583fcaa039195a9eb77d9979b79a93e5_amadey_avoslocker_elex_luca-stealer_lynx_njrat
- Size 1.4MB
- SHA256 481feb4d92313271fd58907888c70de3e2de0bb9850e1b69d0a4ba59dafd3e25
- MD5 583fcaa039195a9eb77d9979b79a93e5
- SHA1 7319734290731841526013b095e92f5b41e8d938
- SHA512 bab561627f3e2ca5a8fe1dcccf57d2a950e8a47e7ba9c0b327691769f1f21d2893e70ed579c67874f02db267e15f3ad5982d538693d9be0cc7e65495d2e0a83f
- SSDEEP 24576:8kqwgC+YzRM0jrf5dNlxw13hJh3WEi7nTT7ZCyTfaWp5SaTQzSPVqcB5fYXfVtvg:8kqSNlx4L327ZCyTWSgcB5gNt6wK09KH
- TLSH T14965D020F940D032D9E120B686BDE6B26C6D6C32171559CBF3D419B72E70EC26B3966F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1