General
- Target 2026-08-10_955cf765803064172fe32bae9b70882c_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260810-cpbsrsyhra
- SHA256 e8b8c189c8568feb1f3a9cb1c59e5ea1c1ece07d9fca554a35444d551a02f61d
- MD5 955cf765803064172fe32bae9b70882c
- SHA1 f59fa361095a2996216e47258d4330f66142997f
- SHA512 5aaa245ffa917ad0bc367c015fd13d4c5b5325fd610545ff2d479d8f374ff6c2a26e0143a8567e95eca4646ef610d474d3d24da4ee14a76ca59659aa4cd9ed1f
- SSDEEP 49152:nfU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:nfU/jIEeQfoR/IuOFVjUu5
- TLSH T1E6B58D12BAD58432F1B312319DB8C2695674B9A6873685EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_955cf765803064172fe32bae9b70882c_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_955cf765803064172fe32bae9b70882c_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 e8b8c189c8568feb1f3a9cb1c59e5ea1c1ece07d9fca554a35444d551a02f61d
- MD5 955cf765803064172fe32bae9b70882c
- SHA1 f59fa361095a2996216e47258d4330f66142997f
- SHA512 5aaa245ffa917ad0bc367c015fd13d4c5b5325fd610545ff2d479d8f374ff6c2a26e0143a8567e95eca4646ef610d474d3d24da4ee14a76ca59659aa4cd9ed1f
- SSDEEP 49152:nfU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:nfU/jIEeQfoR/IuOFVjUu5
- TLSH T1E6B58D12BAD58432F1B312319DB8C2695674B9A6873685EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.