General
- Target 2026-09-04_4da6d1639496d71805969ab8815b7748_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 3.2MB
- Sample260905-ngd4pszxe1
- SHA256 0fba1b335726e22fd3fd44f04968441dbf0cbaf25f9f12dd157c957c5601a463
- MD5 4da6d1639496d71805969ab8815b7748
- SHA1 bb32129c6454a30b788f119d5d424f43737b235e
- SHA512 54c5eb3f6f8ff3c5555a9044c345bb2689a77ac5c905aa82a4d059d5fcf129a2b34e2541027fccdfce2185d4951f929f296fe69006b0cee90d8c9d40927d2b51
- SSDEEP 49152:v2YPL/RyWskvp5+Wou67VMZpJY9TSNHSPM2jPAfcd7A6QZmvS9l0AFvZYG:vnPLJdfx5+F7VMZpJ1Hn2bQD
- TLSH T193F5CF13FF8285B2F4C20136917B6FBB5D3A66204724D8E397911DF99D301E2763A39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-04_4da6d1639496d71805969ab8815b7748_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_4da6d1639496d71805969ab8815b7748_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_4da6d1639496d71805969ab8815b7748_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 3.2MB
- SHA256 0fba1b335726e22fd3fd44f04968441dbf0cbaf25f9f12dd157c957c5601a463
- MD5 4da6d1639496d71805969ab8815b7748
- SHA1 bb32129c6454a30b788f119d5d424f43737b235e
- SHA512 54c5eb3f6f8ff3c5555a9044c345bb2689a77ac5c905aa82a4d059d5fcf129a2b34e2541027fccdfce2185d4951f929f296fe69006b0cee90d8c9d40927d2b51
- SSDEEP 49152:v2YPL/RyWskvp5+Wou67VMZpJY9TSNHSPM2jPAfcd7A6QZmvS9l0AFvZYG:vnPLJdfx5+F7VMZpJ1Hn2bQD
- TLSH T193F5CF13FF8285B2F4C20136917B6FBB5D3A66204724D8E397911DF99D301E2763A39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Executes dropped EXE
-
Loads dropped DLL