General
- Target 2026-09-16_341aaa6fa3613f3ed58f42d9b2fcc67c_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260916-g4a71azz8p
- SHA256 0fa83cc93912ca6598849b839110d253a9e8d189297106aee341f6ac6f5e4c7b
- MD5 341aaa6fa3613f3ed58f42d9b2fcc67c
- SHA1 b9126cdc50bd5e1a6d0949d838e3db392db39329
- SHA512 ddc828e32f8b0f992b1e362e124d2edb40dceb052dcd3b25e68840ea7069eab155f406c3e0f9f05f0102f7d5fdff6fbe08012886669dab0948f63728044e031a
- SSDEEP 49152:tfU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:tfU/jIEeQfoR/IuOFVjUu5
- TLSH T119B58D12BAD58432F1B312319DB8C2695674B9A6873685EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_341aaa6fa3613f3ed58f42d9b2fcc67c_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_341aaa6fa3613f3ed58f42d9b2fcc67c_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 0fa83cc93912ca6598849b839110d253a9e8d189297106aee341f6ac6f5e4c7b
- MD5 341aaa6fa3613f3ed58f42d9b2fcc67c
- SHA1 b9126cdc50bd5e1a6d0949d838e3db392db39329
- SHA512 ddc828e32f8b0f992b1e362e124d2edb40dceb052dcd3b25e68840ea7069eab155f406c3e0f9f05f0102f7d5fdff6fbe08012886669dab0948f63728044e031a
- SSDEEP 49152:tfU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:tfU/jIEeQfoR/IuOFVjUu5
- TLSH T119B58D12BAD58432F1B312319DB8C2695674B9A6873685EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.