General
- Target 2026-08-13_1f9d2824aacf78e753b553bc9017a6fd_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260813-mdds4afl6s
- SHA256 3b88ded7c294bdccea7f757d1ddd760d03365fed6bdf0de07071c3b9ca7d47b5
- MD5 1f9d2824aacf78e753b553bc9017a6fd
- SHA1 0ee5b28ef9143665ab2a16f2323b615ee4e276c3
- SHA512 03ebb475e8d3208f335e8ba825eb696f7cceca03e88f6317b078cab1ed2cb1fe7d1a233ad9abf8e013ad4d28008fdef22da7502b0a4fa11d8fa57a78964cdc0e
- SSDEEP 49152:hOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/q:hOU/jIEeQfoR/IuOFVjUu5s
- TLSH T1B0B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_1f9d2824aacf78e753b553bc9017a6fd_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_1f9d2824aacf78e753b553bc9017a6fd_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 3b88ded7c294bdccea7f757d1ddd760d03365fed6bdf0de07071c3b9ca7d47b5
- MD5 1f9d2824aacf78e753b553bc9017a6fd
- SHA1 0ee5b28ef9143665ab2a16f2323b615ee4e276c3
- SHA512 03ebb475e8d3208f335e8ba825eb696f7cceca03e88f6317b078cab1ed2cb1fe7d1a233ad9abf8e013ad4d28008fdef22da7502b0a4fa11d8fa57a78964cdc0e
- SSDEEP 49152:hOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/q:hOU/jIEeQfoR/IuOFVjUu5s
- TLSH T1B0B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.