General
- Target 2026-08-16_8d736ae9767e7bb0c2738aa72d2ec396_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260816-cjhdcsxflh
- SHA256 33734f856f67dbc8eaf08a2573fa714cd73d1c832ac8049dc607d565a8079d80
- MD5 8d736ae9767e7bb0c2738aa72d2ec396
- SHA1 1a7ed9e7adbcd3758f7970c1bb7c79bfab83a319
- SHA512 6a567316ca25af4d8afd8b51bb7da8dcefe9f048e804a9252d10ca9988b7f1406366105160e293c0b94c810bbf2246c8fae2b35f06f7d3e4ac52db758e6b5277
- SSDEEP 49152:rOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/e:rOU/jIEeQfoR/IuOFVjUu58
- TLSH T18DB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_8d736ae9767e7bb0c2738aa72d2ec396_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_8d736ae9767e7bb0c2738aa72d2ec396_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 33734f856f67dbc8eaf08a2573fa714cd73d1c832ac8049dc607d565a8079d80
- MD5 8d736ae9767e7bb0c2738aa72d2ec396
- SHA1 1a7ed9e7adbcd3758f7970c1bb7c79bfab83a319
- SHA512 6a567316ca25af4d8afd8b51bb7da8dcefe9f048e804a9252d10ca9988b7f1406366105160e293c0b94c810bbf2246c8fae2b35f06f7d3e4ac52db758e6b5277
- SSDEEP 49152:rOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/e:rOU/jIEeQfoR/IuOFVjUu58
- TLSH T18DB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.