General
- Target 2026-09-04_0363b304513fe900c89ae67bf2d5eeb3_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260905-yer8naff68
- SHA256 a6f996bc69a9492b71616e55bc93592375771d739c34b02f41be877822ea02a2
- MD5 0363b304513fe900c89ae67bf2d5eeb3
- SHA1 1239f9e6d786a71e305859d8ca0b5aaf0b8cf2f4
- SHA512 a12947bdc6df5cb14f513a12fb287c9e1378fc6dd675d6457f182ba636b31ec658ddd1c297f4376d9bab5e13d98c81c17279cf05cd0f3158166ce39a072e0c6c
- SSDEEP 49152:LOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/M:LOU/jIEeQfoR/IuOFVjUu5G
- TLSH T1BBB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_0363b304513fe900c89ae67bf2d5eeb3_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_0363b304513fe900c89ae67bf2d5eeb3_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 a6f996bc69a9492b71616e55bc93592375771d739c34b02f41be877822ea02a2
- MD5 0363b304513fe900c89ae67bf2d5eeb3
- SHA1 1239f9e6d786a71e305859d8ca0b5aaf0b8cf2f4
- SHA512 a12947bdc6df5cb14f513a12fb287c9e1378fc6dd675d6457f182ba636b31ec658ddd1c297f4376d9bab5e13d98c81c17279cf05cd0f3158166ce39a072e0c6c
- SSDEEP 49152:LOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/M:LOU/jIEeQfoR/IuOFVjUu5G
- TLSH T1BBB58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.