General
- Target 2026-08-16_e9bd390c15083c60ad1ed81e129f5d4b_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260816-d13ajay1ex
- SHA256 6f7c1cc41ac4fe80fb5998afd51617a8d86529d89d5919573345f6a87a6ec2b7
- MD5 e9bd390c15083c60ad1ed81e129f5d4b
- SHA1 a7b8e5f6a8c3f6c1221531378db82e027b895945
- SHA512 70ccc31844e1d78723653d34ef7bd61dfd7ac38ab4da99cce5786aabe20ff0edb90c3a41654e3f429d21c6b02fea23866dc615c77c5590b74a82d2e2dc115def
- SSDEEP 49152:OfU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/8:OfU/jIEeQfoR/IuOFVjUu5W
- TLSH T178B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_e9bd390c15083c60ad1ed81e129f5d4b_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_e9bd390c15083c60ad1ed81e129f5d4b_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 6f7c1cc41ac4fe80fb5998afd51617a8d86529d89d5919573345f6a87a6ec2b7
- MD5 e9bd390c15083c60ad1ed81e129f5d4b
- SHA1 a7b8e5f6a8c3f6c1221531378db82e027b895945
- SHA512 70ccc31844e1d78723653d34ef7bd61dfd7ac38ab4da99cce5786aabe20ff0edb90c3a41654e3f429d21c6b02fea23866dc615c77c5590b74a82d2e2dc115def
- SSDEEP 49152:OfU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/8:OfU/jIEeQfoR/IuOFVjUu5W
- TLSH T178B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.