General
- Target 2026-08-21_eb0df42a08835f59c4090bb2708c02ce_amadey_avoslocker_elex_glassworm_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 1.7MB
- Sample260822-as6ffaek7t
- SHA256 2238c3dffd5a5828978928066bf1ee45bf5c8661e8485e6101ecab82edd0bab9
- MD5 eb0df42a08835f59c4090bb2708c02ce
- SHA1 3500785ab8724293e1ebcf2906990003e3372821
- SHA512 b4b381a41d8cc9fec024d70fcef577506c194e3814cb70e27e7a1f412b74e3c231ea40f023b52587b964c9ba4fb011efe74ff1d1f32701bd581567ffd1752cf2
- SSDEEP 49152:b4ijwGJra0uAUfkVy7/ZuLNiXicJFFRGNzj3:bNjwGJrakUQyI7wRGpj3
- TLSH T13E85BE2176D98036F2B32731587C92245A7ABCB2993A854F73CC266D5F30AC18E35B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_eb0df42a08835f59c4090bb2708c02ce_amadey_avoslocker_elex_glassworm_luca-stealer_lynx_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_eb0df42a08835f59c4090bb2708c02ce_amadey_avoslocker_elex_glassworm_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 1.7MB
- SHA256 2238c3dffd5a5828978928066bf1ee45bf5c8661e8485e6101ecab82edd0bab9
- MD5 eb0df42a08835f59c4090bb2708c02ce
- SHA1 3500785ab8724293e1ebcf2906990003e3372821
- SHA512 b4b381a41d8cc9fec024d70fcef577506c194e3814cb70e27e7a1f412b74e3c231ea40f023b52587b964c9ba4fb011efe74ff1d1f32701bd581567ffd1752cf2
- SSDEEP 49152:b4ijwGJra0uAUfkVy7/ZuLNiXicJFFRGNzj3:bNjwGJrakUQyI7wRGpj3
- TLSH T13E85BE2176D98036F2B32731587C92245A7ABCB2993A854F73CC266D5F30AC18E35B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1