General
- Target 2026-08-24_acf80928968ff3d1aa879abbc1c33aa4_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260825-e3r31ssxfs
- SHA256 b369403effce85c3fe0038a2cac39361fcb04a295f49119d39beac212ef28cb6
- MD5 acf80928968ff3d1aa879abbc1c33aa4
- SHA1 fde7b3e31113b788cd72d5a60f3883984effca50
- SHA512 5fd3265fceb7c170b4249b77d1433779c553681761be6b536873f59e494cb1ac64b78b98ab9d262808936694fc2c6d50487c5e438bba32e1c8340529a508b72f
- SSDEEP 49152:gOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/B:gOU/jIEeQfoR/IuOFVjUu57
- TLSH T1F2B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_acf80928968ff3d1aa879abbc1c33aa4_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_acf80928968ff3d1aa879abbc1c33aa4_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 b369403effce85c3fe0038a2cac39361fcb04a295f49119d39beac212ef28cb6
- MD5 acf80928968ff3d1aa879abbc1c33aa4
- SHA1 fde7b3e31113b788cd72d5a60f3883984effca50
- SHA512 5fd3265fceb7c170b4249b77d1433779c553681761be6b536873f59e494cb1ac64b78b98ab9d262808936694fc2c6d50487c5e438bba32e1c8340529a508b72f
- SSDEEP 49152:gOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/B:gOU/jIEeQfoR/IuOFVjUu57
- TLSH T1F2B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.