General
- Target 2026-10-08_284360a45d9dc4ec7b057c3bbdc6a03d_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample261009-xdm2wadf98
- SHA256 a183db2bdb9385c7438d4ff763179756efa2bdc21430e9fa1f05bc0d421c7943
- MD5 284360a45d9dc4ec7b057c3bbdc6a03d
- SHA1 3d1d7600896c42874782fee2357b939bd90d23d7
- SHA512 4aa530bf277744664ff3561f06475fac7c59e2ae04ee39168a6793a6411eac05266a24e131319a3bbc8a1f071a1461f7d80e0e48cc06a26ee737a59baf9fd3f8
- SSDEEP 49152:XfU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:XfU/jIEeQfoR/IuOFVjUu5
- TLSH T1B0B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_284360a45d9dc4ec7b057c3bbdc6a03d_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_284360a45d9dc4ec7b057c3bbdc6a03d_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 a183db2bdb9385c7438d4ff763179756efa2bdc21430e9fa1f05bc0d421c7943
- MD5 284360a45d9dc4ec7b057c3bbdc6a03d
- SHA1 3d1d7600896c42874782fee2357b939bd90d23d7
- SHA512 4aa530bf277744664ff3561f06475fac7c59e2ae04ee39168a6793a6411eac05266a24e131319a3bbc8a1f071a1461f7d80e0e48cc06a26ee737a59baf9fd3f8
- SSDEEP 49152:XfU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:XfU/jIEeQfoR/IuOFVjUu5
- TLSH T1B0B58D12BAD58432F1B312319DB8C2695674B9A6473689EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.