General
- Target 2026-08-16_e0c4cfeb433da44a870e35dcb981aa6d_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260816-d3ebgsyena
- SHA256 2db20deddb4b6258d031abc1c25d310397a47f54b91d7e01f00c07fc7c039af4
- MD5 e0c4cfeb433da44a870e35dcb981aa6d
- SHA1 1377f4db329742914c10dd9075dc385a1474bc1b
- SHA512 eef50467f439c70c34aa4196485ac72bb5ce7f69db53f289a91f81502ac82019da900cad969de19fed5692bf72de6abdb4cdfc2bbd9e14bc7dd7776ad143604c
- SSDEEP 49152:/fU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:/fU/jIEeQfoR/IuOFVjUu5
- TLSH T124B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_e0c4cfeb433da44a870e35dcb981aa6d_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_e0c4cfeb433da44a870e35dcb981aa6d_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 2db20deddb4b6258d031abc1c25d310397a47f54b91d7e01f00c07fc7c039af4
- MD5 e0c4cfeb433da44a870e35dcb981aa6d
- SHA1 1377f4db329742914c10dd9075dc385a1474bc1b
- SHA512 eef50467f439c70c34aa4196485ac72bb5ce7f69db53f289a91f81502ac82019da900cad969de19fed5692bf72de6abdb4cdfc2bbd9e14bc7dd7776ad143604c
- SSDEEP 49152:/fU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:/fU/jIEeQfoR/IuOFVjUu5
- TLSH T124B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.