2026-08-10_58e589ccc75219a3ac81e72648356416_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat

General

Target
2026-08-10_58e589ccc75219a3ac81e72648356416_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat
Size 705KB
Sample260810-jac6lstdqe
SHA256 5f0ff11575200fb3a7742c98c314a2ca56d11d69ba37cb1e496faadd535718d9
MD5 58e589ccc75219a3ac81e72648356416
SHA1 beffe911e43e5c3a18d3d0b85a0f3e330799d509
SHA512 3d5c7b76fdf99378a6271029d38fb5c61b76154fae8d863e3cf9e45ed199933debf9ef6ff13e1746f76297cfbf0956b6d4f505bc69032368b90f48f0c9616487
SSDEEP 12288:KUZO4wlkL5YEotwli5vybC3c7UQOnLvZ1Jlb1uA/Vg2cQdwYquN1GQaOn:rzwlkL5YEotwli9oOcMb1uA/Vj3
TLSH
T14EE47C20B580C077E96311332EE8E6F455ADB8304B9524C773895BBA9F2E7E15B3634B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_58e589ccc75219a3ac81e72648356416_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-10_58e589ccc75219a3ac81e72648356416_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat

.exe 705KB

2026-08-10_58e589ccc75219a3ac81e72648356416_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat

IMPHASH c81735b12ec98b6ddf024f56901cdca6
SHA256 5f0ff11575200fb3a7742c98c314a2ca56d11d69ba37cb1e496faadd535718d9
MD5 58e589ccc75219a3ac81e72648356416
SHA1 beffe911e43e5c3a18d3d0b85a0f3e330799d509
SHA512 3d5c7b76fdf99378a6271029d38fb5c61b76154fae8d863e3cf9e45ed199933debf9ef6ff13e1746f76297cfbf0956b6d4f505bc69032368b90f48f0c9616487
SSDEEP 12288:KUZO4wlkL5YEotwli5vybC3c7UQOnLvZ1Jlb1uA/Vg2cQdwYquN1GQaOn:rzwlkL5YEotwli9oOcMb1uA/Vj3
TLSH
T14EE47C20B580C077E96311332EE8E6F455ADB8304B9524C773895BBA9F2E7E15B3634B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

246058

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Script\opener\Release2\Console-Opener.pdb

kernel32

MultiByteToWideChar GetProcAddress LoadLibraryW CreateFileW CloseHandle ReadConsoleW FormatMessageA WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection LocalFree EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo GetCurrentThreadId IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RaiseException GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId InitializeSListHead GetLastError HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetModuleFileNameW LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetCurrentThread GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetFileType SetConsoleCtrlHandler GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW OutputDebugStringW SetStdHandle GetFileSizeEx SetFilePointerEx HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile WriteConsoleW

user32

wsprintfW

Name

.text

Size

558KB

Virtual Size

557KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

114KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.msvcjmc

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_58e589ccc75219a3ac81e72648356416_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat

kernel32

user32

generic