General
- Target 2026-09-13_1dfe162317666713e5cc26125e3ca027_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260913-vtdf9sar9w
- SHA256 000384486f93dbe893ec017f68aa04dc46ded76dfd41d66f96b576fe9caf441c
- MD5 1dfe162317666713e5cc26125e3ca027
- SHA1 467b62ffa78e8885935aff0fae26ee6e766e95f8
- SHA512 12fe4e36df946011868fef7681e1feba795f12bbc921fb2ff95a4c5eeeebb7c71ae312d2abe9b8720256b4e483a57012ff4751df51754994ec734ba1443fc626
- SSDEEP 49152:eOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/u:eOU/jIEeQfoR/IuOFVjUu5o
- TLSH T118B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_1dfe162317666713e5cc26125e3ca027_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_1dfe162317666713e5cc26125e3ca027_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 000384486f93dbe893ec017f68aa04dc46ded76dfd41d66f96b576fe9caf441c
- MD5 1dfe162317666713e5cc26125e3ca027
- SHA1 467b62ffa78e8885935aff0fae26ee6e766e95f8
- SHA512 12fe4e36df946011868fef7681e1feba795f12bbc921fb2ff95a4c5eeeebb7c71ae312d2abe9b8720256b4e483a57012ff4751df51754994ec734ba1443fc626
- SSDEEP 49152:eOU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/u:eOU/jIEeQfoR/IuOFVjUu5o
- TLSH T118B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.