General
- Target 2026-08-15_d51d3b3afb07630738b439ef9ee0b630_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260815-sepvmsdl3y
- SHA256 31434c9ceecb0c0791e8d60d611f2c39fcd383be1f1ceead70347d2e1846e35e
- MD5 d51d3b3afb07630738b439ef9ee0b630
- SHA1 f1e6a67a54a430c36610ebab605b4e525f1994cf
- SHA512 506eda01d9c6ee9c3980ec2098b82947a1821eb8fa6c06921258d28cd87c7d808dba444f3c0b7f1dcb182988a2e307fb5a4adfdd55d5db28f2defd379f3c56c1
- SSDEEP 49152:9fU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:9fU/jIEeQfoR/IuOFVjUu5
- TLSH T1D5B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_d51d3b3afb07630738b439ef9ee0b630_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_d51d3b3afb07630738b439ef9ee0b630_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 31434c9ceecb0c0791e8d60d611f2c39fcd383be1f1ceead70347d2e1846e35e
- MD5 d51d3b3afb07630738b439ef9ee0b630
- SHA1 f1e6a67a54a430c36610ebab605b4e525f1994cf
- SHA512 506eda01d9c6ee9c3980ec2098b82947a1821eb8fa6c06921258d28cd87c7d808dba444f3c0b7f1dcb182988a2e307fb5a4adfdd55d5db28f2defd379f3c56c1
- SSDEEP 49152:9fU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:9fU/jIEeQfoR/IuOFVjUu5
- TLSH T1D5B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.