General
- Target 2026-08-24_e65a5f59a4738ae687d4db802cdc762c_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260824-1l936azvbx
- SHA256 dd45d488a365c997ae8b33d1f63abb5df5e4b5e50c3535dc277167889b5af50b
- MD5 e65a5f59a4738ae687d4db802cdc762c
- SHA1 5ca389b75c5628de469e9c4bec9817ffb1a56b18
- SHA512 28115f2cc2796f901b3f682cbe703106d95706cbac3b25f87c113adbf616f9d61a9155ddbf9193ea58d24284cf0b70d74f5277f1a9006d347b368c4dee99a40f
- SSDEEP 49152:HOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/j:HOU/jIEeQfoR/IuOFVjUu5B
- TLSH T163B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18A32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_e65a5f59a4738ae687d4db802cdc762c_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_e65a5f59a4738ae687d4db802cdc762c_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 dd45d488a365c997ae8b33d1f63abb5df5e4b5e50c3535dc277167889b5af50b
- MD5 e65a5f59a4738ae687d4db802cdc762c
- SHA1 5ca389b75c5628de469e9c4bec9817ffb1a56b18
- SHA512 28115f2cc2796f901b3f682cbe703106d95706cbac3b25f87c113adbf616f9d61a9155ddbf9193ea58d24284cf0b70d74f5277f1a9006d347b368c4dee99a40f
- SSDEEP 49152:HOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/j:HOU/jIEeQfoR/IuOFVjUu5B
- TLSH T163B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18A32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.