General
- Target 2026-08-15_5df93dce47de83f5f09baf1474c9e025_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260815-ldm64ataqf
- SHA256 7d6f432551cebaf465a4112b5f8e382270e708a54b8d72098b9e75f47f3e315b
- MD5 5df93dce47de83f5f09baf1474c9e025
- SHA1 989028f42c03784f0976bf2d48905707427a0ba5
- SHA512 3ab5ce2aafb87fd6e543d4ae2786b4a30dbea26686ca466187821c05732302be0eb0c3b97a0ff010f3756c74d5d52274a4e6431c9808674c3f4250c73cbdb57d
- SSDEEP 49152:GOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/Q:GOU/jIEeQfoR/IuOFVjUu5W
- TLSH T162B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_5df93dce47de83f5f09baf1474c9e025_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_5df93dce47de83f5f09baf1474c9e025_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 7d6f432551cebaf465a4112b5f8e382270e708a54b8d72098b9e75f47f3e315b
- MD5 5df93dce47de83f5f09baf1474c9e025
- SHA1 989028f42c03784f0976bf2d48905707427a0ba5
- SHA512 3ab5ce2aafb87fd6e543d4ae2786b4a30dbea26686ca466187821c05732302be0eb0c3b97a0ff010f3756c74d5d52274a4e6431c9808674c3f4250c73cbdb57d
- SSDEEP 49152:GOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/Q:GOU/jIEeQfoR/IuOFVjUu5W
- TLSH T162B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.