General
- Target 2026-09-04_733eb6fcce009a0b85a37cfc336e1d05_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260905-hpg8fawtbs
- SHA256 dbd048510e03eb70823ad642c9edb51739d8dba29e1dd9f1b98f8f6dc518ae25
- MD5 733eb6fcce009a0b85a37cfc336e1d05
- SHA1 d2ae0751b2ebca557e010025b55f1f7f9129c7f3
- SHA512 8fecc375dc8ffde6b33a2dcfdf5e1371ebd6e8a578a8684e1fecede3799bdef836106eaadbd422b617574c318487ad677a8d53e00a762c4c0bce9bef57cb6a30
- SSDEEP 49152:ifU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:ifU/jIEeQfoR/IuOFVjUu5
- TLSH T1AFB58D12BAD58432F1B312319DB8C2695674B9A6473685EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_733eb6fcce009a0b85a37cfc336e1d05_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_733eb6fcce009a0b85a37cfc336e1d05_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 dbd048510e03eb70823ad642c9edb51739d8dba29e1dd9f1b98f8f6dc518ae25
- MD5 733eb6fcce009a0b85a37cfc336e1d05
- SHA1 d2ae0751b2ebca557e010025b55f1f7f9129c7f3
- SHA512 8fecc375dc8ffde6b33a2dcfdf5e1371ebd6e8a578a8684e1fecede3799bdef836106eaadbd422b617574c318487ad677a8d53e00a762c4c0bce9bef57cb6a30
- SSDEEP 49152:ifU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:ifU/jIEeQfoR/IuOFVjUu5
- TLSH T1AFB58D12BAD58432F1B312319DB8C2695674B9A6473685EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.