General
- Target 2026-08-08_d70da11eb47231e41898dac83cf5cea2_amadey_avoslocker_darkgate_elex_floxif_luca-stealer_lynx_njrat
- Size 2.1MB
- Sample260808-sya6lazbjc
- SHA256 fec186c24567e4480672eb19df71f109ce402801cddf443a3f4a0f04871221af
- MD5 d70da11eb47231e41898dac83cf5cea2
- SHA1 06321404fe913f7702d56481141fcfd0cb6d9ea5
- SHA512 e67ca1694609516c64c7f918440f25ba13ab3106e6c88e03ee79637643f989ea039dff16a3006d9c5a3fe9ce7fa7284d836ace19e7c1af8b5266151a743f89d1
- SSDEEP 49152:YHO9Neo8evYBKqxD3Qh9Wjho13fAUWZUxZGoJdN7e68:iO9Tgjjo13fADoJdNM
- TLSH T148A58D2072859635E4B30C359E7E921C4428FD300BB589DB628CFD7F76B99D2693272B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_d70da11eb47231e41898dac83cf5cea2_amadey_avoslocker_darkgate_elex_floxif_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_d70da11eb47231e41898dac83cf5cea2_amadey_avoslocker_darkgate_elex_floxif_luca-stealer_lynx_njrat
- Size 2.1MB
- SHA256 fec186c24567e4480672eb19df71f109ce402801cddf443a3f4a0f04871221af
- MD5 d70da11eb47231e41898dac83cf5cea2
- SHA1 06321404fe913f7702d56481141fcfd0cb6d9ea5
- SHA512 e67ca1694609516c64c7f918440f25ba13ab3106e6c88e03ee79637643f989ea039dff16a3006d9c5a3fe9ce7fa7284d836ace19e7c1af8b5266151a743f89d1
- SSDEEP 49152:YHO9Neo8evYBKqxD3Qh9Wjho13fAUWZUxZGoJdN7e68:iO9Tgjjo13fADoJdNM
- TLSH T148A58D2072859635E4B30C359E7E921C4428FD300BB589DB628CFD7F76B99D2693272B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Floxif payload
-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.