General
- Target 2026-08-22_76504d58c0cfdccace905d69ec856b1f_amadey_avoslocker_elex_luca-stealer_lynx_njrat
- Size 1.6MB
- Sample260823-g7aewaep9s
- SHA256 0416f9edc9bb8af6d8915d37598e136764bdbae1bd638c2a3b4635d8437981b6
- MD5 76504d58c0cfdccace905d69ec856b1f
- SHA1 08cbabd2d12471253bb6f44cd964662aaf7ade39
- SHA512 d837fecb10f590a1b2033d701eccd21f7ede186649ee4ecf51d0f78f674e52c5e3c28e49ffce1368bb97bc106f66ad7ad10b2d0169cf249ceada753560182dc9
- SSDEEP 24576:Mx7YiBLZ05jNTmJWExq/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:MxUiHIjNgqLNiXicJFFRGNzj3
- TLSH T12075DFA176C49035F5B31A315E7986304D3EBD655C629E8F6384396E8A31BC2CA34F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_76504d58c0cfdccace905d69ec856b1f_amadey_avoslocker_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_76504d58c0cfdccace905d69ec856b1f_amadey_avoslocker_elex_luca-stealer_lynx_njrat
- Size 1.6MB
- SHA256 0416f9edc9bb8af6d8915d37598e136764bdbae1bd638c2a3b4635d8437981b6
- MD5 76504d58c0cfdccace905d69ec856b1f
- SHA1 08cbabd2d12471253bb6f44cd964662aaf7ade39
- SHA512 d837fecb10f590a1b2033d701eccd21f7ede186649ee4ecf51d0f78f674e52c5e3c28e49ffce1368bb97bc106f66ad7ad10b2d0169cf249ceada753560182dc9
- SSDEEP 24576:Mx7YiBLZ05jNTmJWExq/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:MxUiHIjNgqLNiXicJFFRGNzj3
- TLSH T12075DFA176C49035F5B31A315E7986304D3EBD655C629E8F6384396E8A31BC2CA34F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1