General
- Target 2026-08-10_67d7ef1dfd04c7563b6daf936e65cf0a_amadey_avoslocker_cobalt-strike_elex_floxif_hellokitty_luca-stealer_lynx_njrat
- Size 224KB
- Sample260810-sqavvsxtds
- SHA256 f63b072ff0223f54d0b1ba39af1b996c3a94e613bead11b3cf2673e34cc0bf3a
- MD5 67d7ef1dfd04c7563b6daf936e65cf0a
- SHA1 455099a49294b3726e5b3b22047b3736dfb451a5
- SHA512 37349e8c08a25eb8ddda48086589553dcc592cc43871f2b26c9b8e82f1981d85352b693185b3f1c22cd0e8d81bae9a6a268c073f420a32dce2694b35e51e4da7
- SSDEEP 6144:ay72zi7ajvRcGLKZH2F3Hw9hH4JdBV+UdvrEFp7hKpUF:ay72zi+jvzQ9hH4JdBjvrEH7fF
- TLSH T1EE24BF4439C0C3F5D8B228303574AA705DFDFD3C0E665A9B930915799E2C9D2AA68F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_67d7ef1dfd04c7563b6daf936e65cf0a_amadey_avoslocker_cobalt-strike_elex_floxif_hellokitty_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_67d7ef1dfd04c7563b6daf936e65cf0a_amadey_avoslocker_cobalt-strike_elex_floxif_hellokitty_luca-stealer_lynx_njrat
- Size 224KB
- SHA256 f63b072ff0223f54d0b1ba39af1b996c3a94e613bead11b3cf2673e34cc0bf3a
- MD5 67d7ef1dfd04c7563b6daf936e65cf0a
- SHA1 455099a49294b3726e5b3b22047b3736dfb451a5
- SHA512 37349e8c08a25eb8ddda48086589553dcc592cc43871f2b26c9b8e82f1981d85352b693185b3f1c22cd0e8d81bae9a6a268c073f420a32dce2694b35e51e4da7
- SSDEEP 6144:ay72zi7ajvRcGLKZH2F3Hw9hH4JdBV+UdvrEFp7hKpUF:ay72zi+jvzQ9hH4JdBjvrEH7fF
- TLSH T1EE24BF4439C0C3F5D8B228303574AA705DFDFD3C0E665A9B930915799E2C9D2AA68F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Floxif payload
-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.