General
- Target 2026-08-12_c2c3be3c41ebcb63c941470cd1ecc94a_amadey_avoslocker_elex_hellokitty_luca-stealer_lynx_njrat
- Size 1.3MB
- Sample260812-p4vkmsgp8z
- SHA256 61268d379bc151facdb99f71cf4c03fd1281cb714f7155be20acce7b279a2a66
- MD5 c2c3be3c41ebcb63c941470cd1ecc94a
- SHA1 eb65a1cc2e71400ba8ab8c98217c431089770133
- SHA512 b24e5170ba389acb0b096dac9aeb6f40f0fed90583405f704ad64113aefe5b321717c298274fc0c8bb1795f037ed3ca5009e327070c0c1e4fcb6c79f6940de8d
- SSDEEP 24576:YuUjXfYdbrtjrKKFJELMY6U0aGCXTeSKsyd:hqXAV5OKF676sGCXiXsy
- TLSH T1BC5512603DD19072D4B734311670DBB0AD2CFD301EB4DAABA74825395E35AE1A934ABF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_c2c3be3c41ebcb63c941470cd1ecc94a_amadey_avoslocker_elex_hellokitty_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_c2c3be3c41ebcb63c941470cd1ecc94a_amadey_avoslocker_elex_hellokitty_luca-stealer_lynx_njrat
- Size 1.3MB
- SHA256 61268d379bc151facdb99f71cf4c03fd1281cb714f7155be20acce7b279a2a66
- MD5 c2c3be3c41ebcb63c941470cd1ecc94a
- SHA1 eb65a1cc2e71400ba8ab8c98217c431089770133
- SHA512 b24e5170ba389acb0b096dac9aeb6f40f0fed90583405f704ad64113aefe5b321717c298274fc0c8bb1795f037ed3ca5009e327070c0c1e4fcb6c79f6940de8d
- SSDEEP 24576:YuUjXfYdbrtjrKKFJELMY6U0aGCXTeSKsyd:hqXAV5OKF676sGCXiXsy
- TLSH T1BC5512603DD19072D4B734311670DBB0AD2CFD301EB4DAABA74825395E35AE1A934ABF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1