General
- Target 2026-10-11_6f2ac6ec88de0f9f4cbfe35e4ece9cf4_amadey_avoslocker_elex_luca-stealer_lynx_njrat
- Size 1.5MB
- Sample261012-xn2b9aws7p
- SHA256 e4868b1d411942455eb779b4f9319eb93c2b465b50bb09b42c832ea28dcb0a46
- MD5 6f2ac6ec88de0f9f4cbfe35e4ece9cf4
- SHA1 76a2a40829e872a804407e12ce4ba7627d489836
- SHA512 bbf3bb49281c3d01c815de923b4d73738a4bd135ade2f9ddb76e322d480dbbbc9efcce3adc95c9a7527f5b26a09724ec8c446ec383d8bf4987cd68223d06a5a9
- SSDEEP 24576:I1pSfb3Gz4oDd6dChHstTTzFKMceJfG4aqg4zdG4j9/ilATPzX+l1Wms+z0tt76z:mIdChMxTkMHJe4ad4JrRsGPSlUt56z
- TLSH T10765D0217682C032E57101312A7CDBB68579BE354F6359DBA3C02F690D746E26E31F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_6f2ac6ec88de0f9f4cbfe35e4ece9cf4_amadey_avoslocker_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_6f2ac6ec88de0f9f4cbfe35e4ece9cf4_amadey_avoslocker_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_6f2ac6ec88de0f9f4cbfe35e4ece9cf4_amadey_avoslocker_elex_luca-stealer_lynx_njrat
- Size 1.5MB
- SHA256 e4868b1d411942455eb779b4f9319eb93c2b465b50bb09b42c832ea28dcb0a46
- MD5 6f2ac6ec88de0f9f4cbfe35e4ece9cf4
- SHA1 76a2a40829e872a804407e12ce4ba7627d489836
- SHA512 bbf3bb49281c3d01c815de923b4d73738a4bd135ade2f9ddb76e322d480dbbbc9efcce3adc95c9a7527f5b26a09724ec8c446ec383d8bf4987cd68223d06a5a9
- SSDEEP 24576:I1pSfb3Gz4oDd6dChHstTTzFKMceJfG4aqg4zdG4j9/ilATPzX+l1Wms+z0tt76z:mIdChMxTkMHJe4ad4JrRsGPSlUt56z
- TLSH T10765D0217682C032E57101312A7CDBB68579BE354F6359DBA3C02F690D746E26E31F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks whether UAC is enabled
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory