General
- Target 2026-08-20_8a059027fec7324a1d4d8dbef785498c_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat_rhadamanthys
- Size 1.6MB
- Sample260820-pgaxqazves
- SHA256 c57c0d650462e8f582dd22a873be5287da4f58ad0b21db18b5854ecc12b2166f
- MD5 8a059027fec7324a1d4d8dbef785498c
- SHA1 0d1f316c1c39bdbd09ded80856a581be625f85bb
- SHA512 681b53baec52cb3103e36f0b0a08b0fc6e6ed5d2468916c8fc7480abb4d14ba4a29ccfa49f715350ea0ec8d5d7a0ab64434bd677e8fe22b168202cca87ef9397
- SSDEEP 24576:qg8x+aIwBnuDCaGqEpkHGMXNk7DFO8HbkfFVEQa8EBb6pPtfmiuWX8:P8JuOkHGMXNoFO8Hk3Ezb6pPtfqi8
- TLSH T15175181177E95A29F5FB2B31AEB851604A7BBC615F31C7CF13801A5E2934AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_8a059027fec7324a1d4d8dbef785498c_amadey_avoslocker_darkgate_elex_hijackloader_luca-steale.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_8a059027fec7324a1d4d8dbef785498c_amadey_avoslocker_darkgate_elex_hijackloader_luca-steale.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_8a059027fec7324a1d4d8dbef785498c_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat_rhadamanthys
- Size 1.6MB
- SHA256 c57c0d650462e8f582dd22a873be5287da4f58ad0b21db18b5854ecc12b2166f
- MD5 8a059027fec7324a1d4d8dbef785498c
- SHA1 0d1f316c1c39bdbd09ded80856a581be625f85bb
- SHA512 681b53baec52cb3103e36f0b0a08b0fc6e6ed5d2468916c8fc7480abb4d14ba4a29ccfa49f715350ea0ec8d5d7a0ab64434bd677e8fe22b168202cca87ef9397
- SSDEEP 24576:qg8x+aIwBnuDCaGqEpkHGMXNk7DFO8HbkfFVEQa8EBb6pPtfmiuWX8:P8JuOkHGMXNoFO8Hk3Ezb6pPtfqi8
- TLSH T15175181177E95A29F5FB2B31AEB851604A7BBC615F31C7CF13801A5E2934AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE