General
- Target 2026-08-24_2faef2d7c0e1c644cb8a141fb9b020ea_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260825-tqaerssse1
- SHA256 5d121029ad10ad808df97277851984247001bc7eed5583dfd0a8285b93e988a3
- MD5 2faef2d7c0e1c644cb8a141fb9b020ea
- SHA1 1b2b51685db6705ac577b0cd64a4ec48966b7763
- SHA512 8ad5a6ce0e7cd87292d7f9f629a552ee6c5237f9491da83dcdabea689ebdfbeea3c9c3b3ad0ebbbd322648adc14ba9708a258c2e05839ce8b730c309255bb320
- SSDEEP 49152:COU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/k:COU/jIEeQfoR/IuOFVjUu5C
- TLSH T18DB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C1CA32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_2faef2d7c0e1c644cb8a141fb9b020ea_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_2faef2d7c0e1c644cb8a141fb9b020ea_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 5d121029ad10ad808df97277851984247001bc7eed5583dfd0a8285b93e988a3
- MD5 2faef2d7c0e1c644cb8a141fb9b020ea
- SHA1 1b2b51685db6705ac577b0cd64a4ec48966b7763
- SHA512 8ad5a6ce0e7cd87292d7f9f629a552ee6c5237f9491da83dcdabea689ebdfbeea3c9c3b3ad0ebbbd322648adc14ba9708a258c2e05839ce8b730c309255bb320
- SSDEEP 49152:COU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/k:COU/jIEeQfoR/IuOFVjUu5C
- TLSH T18DB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C1CA32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.