General
- Target 2026-08-14_04b21d5b90bd32f49a4667e817b90d6e_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260814-kdw9bsyemb
- SHA256 feaadec2d83d6e0b017bc4d5271ff78fe823870aa73f4ea9a666975c7e8bbf41
- MD5 04b21d5b90bd32f49a4667e817b90d6e
- SHA1 584b028b8745c8424aef34737dc73be8373af6ca
- SHA512 4fb97db542d7f3c1a3b2c7b92e0fa1422251b2cd9c76232d23295fb78be31a5ba73b8f2efa968b454677a175f78ef56dd132d31f423b1ef980bd96d7ffedd369
- SSDEEP 49152:/OU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/k:/OU/jIEeQfoR/IuOFVjUu5+
- TLSH T1EAB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_04b21d5b90bd32f49a4667e817b90d6e_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_04b21d5b90bd32f49a4667e817b90d6e_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 feaadec2d83d6e0b017bc4d5271ff78fe823870aa73f4ea9a666975c7e8bbf41
- MD5 04b21d5b90bd32f49a4667e817b90d6e
- SHA1 584b028b8745c8424aef34737dc73be8373af6ca
- SHA512 4fb97db542d7f3c1a3b2c7b92e0fa1422251b2cd9c76232d23295fb78be31a5ba73b8f2efa968b454677a175f78ef56dd132d31f423b1ef980bd96d7ffedd369
- SSDEEP 49152:/OU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/k:/OU/jIEeQfoR/IuOFVjUu5+
- TLSH T1EAB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.