2026-09-20_40402a82d6264a0d94a9deb4951a09aa_amadey_avoslocker_elex_luca-stealer_lynx_njrat_redline-stealer

General

Target
2026-09-20_40402a82d6264a0d94a9deb4951a09aa_amadey_avoslocker_elex_luca-stealer_lynx_njrat_redline-stealer
Size 1.4MB
Sample260921-lydhdsff89
SHA256 4874888279e5650648b66724725be67c66970d41d1f43ab80d918e962deb3408
MD5 40402a82d6264a0d94a9deb4951a09aa
SHA1 c588c6bb68b071c529223ad7b4262322e6aea673
SHA512 fd5aa6ff1b68335518336976e2d2c701dfb9548bea062830c20d71c6ecafe25b42667b74508c4affdc888c5f7cbd22d766b286e3c9fd143969f3a1b838de4d8b
SSDEEP 24576:AEwKj1V/USg6uDvOWEthn74YrH67Gf1l2w1cDPtT7D:AEwijMSzuCWET0YrH67+n2wqPtT/
TLSH
T1F8659E01F501A13AF8F340BBCEFE692DD658AA61130954E7B3C8594F8B62EF27932157
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-20_40402a82d6264a0d94a9deb4951a09aa_amadey_avoslocker_elex_luca-stealer_lynx_njrat_redline-stealer

File Explorer

2026-09-20_40402a82d6264a0d94a9deb4951a09aa_amadey_avoslocker_elex_luca-stealer_lynx_njrat_redline-stealer

.exe 1.4MB

2026-09-20_40402a82d6264a0d94a9deb4951a09aa_amadey_avoslocker_elex_luca-stealer_lynx_njrat_redline-stealer

IMPHASH eedae5d7dc001124ae8e1c526cdcafab
SHA256 4874888279e5650648b66724725be67c66970d41d1f43ab80d918e962deb3408
MD5 40402a82d6264a0d94a9deb4951a09aa
SHA1 c588c6bb68b071c529223ad7b4262322e6aea673
SHA512 fd5aa6ff1b68335518336976e2d2c701dfb9548bea062830c20d71c6ecafe25b42667b74508c4affdc888c5f7cbd22d766b286e3c9fd143969f3a1b838de4d8b
SSDEEP 24576:AEwKj1V/USg6uDvOWEthn74YrH67Gf1l2w1cDPtT7D:AEwijMSzuCWET0YrH67+n2wqPtT/
TLSH
T1F8659E01F501A13AF8F340BBCEFE692DD658AA61130954E7B3C8594F8B62EF27932157
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

791526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc VirtualProtect GetProcAddress LoadLibraryA WideCharToMultiByte InitOnceBeginInitialize InitOnceComplete MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo CloseHandle InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead HeapSize RaiseException RtlUnwind GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess WriteFile GetCommandLineA GetCommandLineW OutputDebugStringW HeapFree HeapAlloc CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle CreateFileW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-20_40402a82d6264a0d94a9deb4951a09aa_amadey_avoslocker_elex_luca-stealer_lynx_njrat_redline-stealer

kernel32

generic