General
- Target 2026-08-16_55c31ee0403a59d1f10c68403b8ba77e_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260816-e62fvszdjc
- SHA256 bba2b7698cf871f1507a88bb5c49a5e12adf6849c10bda34f7ccf8e20b9456e0
- MD5 55c31ee0403a59d1f10c68403b8ba77e
- SHA1 e144ea300b7103601ea919ba3a8f2fd0aa2cf83a
- SHA512 c68e4ee2c5d9d25dfc01285350fccc9950ad4b3ee0f24e09d019f99db424e521d56568226e53b2537c88eafbbc0aa42ca56045cb538b71bd8110e729e08bbe7e
- SSDEEP 49152:TfU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:TfU/jIEeQfoR/IuOFVjUu5
- TLSH T13CB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_55c31ee0403a59d1f10c68403b8ba77e_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_55c31ee0403a59d1f10c68403b8ba77e_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 bba2b7698cf871f1507a88bb5c49a5e12adf6849c10bda34f7ccf8e20b9456e0
- MD5 55c31ee0403a59d1f10c68403b8ba77e
- SHA1 e144ea300b7103601ea919ba3a8f2fd0aa2cf83a
- SHA512 c68e4ee2c5d9d25dfc01285350fccc9950ad4b3ee0f24e09d019f99db424e521d56568226e53b2537c88eafbbc0aa42ca56045cb538b71bd8110e729e08bbe7e
- SSDEEP 49152:TfU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:TfU/jIEeQfoR/IuOFVjUu5
- TLSH T13CB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.