General
- Target 2026-08-12_bc2a06c3e987fd400ecb91ee94f5d769_amadey_avoslocker_coinminer_elex_luca-stealer_lynx_njrat_remcos
- Size 2.8MB
- Sample260812-p5hbpsvvf1
- SHA256 e45feea4ef0d886cb275d954ee5d34c4feca5fd162443fa149db2605d6a7a8ab
- MD5 bc2a06c3e987fd400ecb91ee94f5d769
- SHA1 98f3f70b059c5cfb79c704f65b2c133ba8823ed6
- SHA512 318cb61c122b108565e5e9fa795af6d1a643b71c46ea93393d66cf99840ebdf3061b4657ba819413ecbac76fc948c07c94f7733aaceda8951d19a1c474954e0e
- SSDEEP 49152:2rZmp72qpIuVLwejJvug9FMARrb1Y90NL2YhsC15OKF676sGCXiXsy:2rE72qpIuVjBuwMAN20Z2ssqOK07JGC+
- TLSH T160D501013DD6C923D5B913B81C3AC99481AEBD60AF7592DBB39432671930BC36532F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_bc2a06c3e987fd400ecb91ee94f5d769_amadey_avoslocker_coinminer_elex_luca-stealer_lynx_njrat_remcos.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_bc2a06c3e987fd400ecb91ee94f5d769_amadey_avoslocker_coinminer_elex_luca-stealer_lynx_njrat_remcos
- Size 2.8MB
- SHA256 e45feea4ef0d886cb275d954ee5d34c4feca5fd162443fa149db2605d6a7a8ab
- MD5 bc2a06c3e987fd400ecb91ee94f5d769
- SHA1 98f3f70b059c5cfb79c704f65b2c133ba8823ed6
- SHA512 318cb61c122b108565e5e9fa795af6d1a643b71c46ea93393d66cf99840ebdf3061b4657ba819413ecbac76fc948c07c94f7733aaceda8951d19a1c474954e0e
- SSDEEP 49152:2rZmp72qpIuVLwejJvug9FMARrb1Y90NL2YhsC15OKF676sGCXiXsy:2rE72qpIuVjBuwMAN20Z2ssqOK07JGC+
- TLSH T160D501013DD6C923D5B913B81C3AC99481AEBD60AF7592DBB39432671930BC36532F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1