2026-08-12_c2c3be3c41ebcb63c941470cd1ecc94a_amadey_avoslocker_elex_hellokitty_luca-stealer_lynx_njrat

General

Target
2026-08-12_c2c3be3c41ebcb63c941470cd1ecc94a_amadey_avoslocker_elex_hellokitty_luca-stealer_lynx_njrat
Size 1.3MB
Sample260812-p4vkmsgp8z
SHA256 61268d379bc151facdb99f71cf4c03fd1281cb714f7155be20acce7b279a2a66
MD5 c2c3be3c41ebcb63c941470cd1ecc94a
SHA1 eb65a1cc2e71400ba8ab8c98217c431089770133
SHA512 b24e5170ba389acb0b096dac9aeb6f40f0fed90583405f704ad64113aefe5b321717c298274fc0c8bb1795f037ed3ca5009e327070c0c1e4fcb6c79f6940de8d
SSDEEP 24576:YuUjXfYdbrtjrKKFJELMY6U0aGCXTeSKsyd:hqXAV5OKF676sGCXiXsy
TLSH
T1BC5512603DD19072D4B734311670DBB0AD2CFD301EB4DAABA74825395E35AE1A934ABF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_c2c3be3c41ebcb63c941470cd1ecc94a_amadey_avoslocker_elex_hellokitty_luca-stealer_lynx_njrat

File Explorer

2026-08-12_c2c3be3c41ebcb63c941470cd1ecc94a_amadey_avoslocker_elex_hellokitty_luca-stealer_lynx_njrat

.exe 1.3MB

2026-08-12_c2c3be3c41ebcb63c941470cd1ecc94a_amadey_avoslocker_elex_hellokitty_luca-stealer_lynx_njrat

IMPHASH 23b9079896617a8a01351c21a6caa337
SHA256 61268d379bc151facdb99f71cf4c03fd1281cb714f7155be20acce7b279a2a66
MD5 c2c3be3c41ebcb63c941470cd1ecc94a
SHA1 eb65a1cc2e71400ba8ab8c98217c431089770133
SHA512 b24e5170ba389acb0b096dac9aeb6f40f0fed90583405f704ad64113aefe5b321717c298274fc0c8bb1795f037ed3ca5009e327070c0c1e4fcb6c79f6940de8d
SSDEEP 24576:YuUjXfYdbrtjrKKFJELMY6U0aGCXTeSKsyd:hqXAV5OKF676sGCXiXsy
TLSH
T1BC5512603DD19072D4B734311670DBB0AD2CFD301EB4DAABA74825395E35AE1A934ABF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

13305

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Z:\Ventoy\Vlnk\vs\VentoyVlnk\Release\VentoyVlnk.pdb

kernel32

ReadFile GetLogicalDrives GetFileSizeEx GetCommandLineW lstrlenW WriteFile DeviceIoControl LoadLibraryExA GetUserDefaultUILanguage CreateMutexA GetVolumeInformationA CreateFileW GetFileAttributesW GetCurrentDirectoryA MultiByteToWideChar GetLastError CreateFileA SetDllDirectoryA CloseHandle LoadLibraryW GetCurrentDirectoryW GetProcAddress WideCharToMultiByte lstrcmpW DecodePointer SetEndOfFile ReadConsoleW HeapReAlloc HeapSize GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx RaiseException GetSystemInfo VirtualProtect VirtualQuery FreeLibrary GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType GetTimeZoneInformation CompareStringW LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap WriteConsoleW

user32

EndDialog SetWindowTextW MessageBoxW LoadIconW GetDlgItem EnableWindow DialogBoxParamA SendMessageW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-12_c2c3be3c41ebcb63c941470cd1ecc94a_amadey_avoslocker_elex_hellokitty_luca-stealer_lynx_njrat

kernel32

user32

generic