General
- Target 2026-08-11_19956c4d22c9cacb8b3ac108f6a05055_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260811-hw73faak4s
- SHA256 69cbba8f93080c2d297c09e90cbb2de42c938dc5b011d7d75dec4b5692e7fa5b
- MD5 19956c4d22c9cacb8b3ac108f6a05055
- SHA1 1c46a1da98a6e4f2e7db615083ce24905b66549a
- SHA512 b89b69e489c69aeec3e4fcef05a5b371dc5fa0544f58097be85359237fc2bbb15cc219c0885d988e2404cd335fb3baacf937244469d23aa21df0f859cff8361e
- SSDEEP 49152:oOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/D:oOU/jIEeQfoR/IuOFVjUu5l
- TLSH T1C1B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C1CA32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_19956c4d22c9cacb8b3ac108f6a05055_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_19956c4d22c9cacb8b3ac108f6a05055_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 69cbba8f93080c2d297c09e90cbb2de42c938dc5b011d7d75dec4b5692e7fa5b
- MD5 19956c4d22c9cacb8b3ac108f6a05055
- SHA1 1c46a1da98a6e4f2e7db615083ce24905b66549a
- SHA512 b89b69e489c69aeec3e4fcef05a5b371dc5fa0544f58097be85359237fc2bbb15cc219c0885d988e2404cd335fb3baacf937244469d23aa21df0f859cff8361e
- SSDEEP 49152:oOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/D:oOU/jIEeQfoR/IuOFVjUu5l
- TLSH T1C1B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C1CA32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.