2026-10-25_783b02901545a84549231043c2ea2abd_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil

General

Target
2026-10-25_783b02901545a84549231043c2ea2abd_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil
Size 4.3MB
Sample261026-3cbkcaxs2n
SHA256 c2bf523b7d474b56aaf8df607a5f83fb48f8285dd866114341e49b6482766859
MD5 783b02901545a84549231043c2ea2abd
SHA1 64d194389d47a0bb5da7f785cec7dfb21763c66d
SHA512 d03294deeec037fcec94c9bb61eebcb65f362d159ccc009d39ce858faa920b1d5bba4d2e8ea6d2e3a4f75e87d93ae5169ddabb5c4cd87ef2d9f6942739ac5440
SSDEEP 98304:kB1n3QrllrrWU1n9lxkPdyoselwRj9LrYb8uFBRS7M:kLIrrWCnEnU9Li8
TLSH
T19226C012FB82C172E49201B1517AAB7B883DAE385734C5C7DBD03E7658306D17A3BB96
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_783b02901545a84549231043c2ea2abd_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil

File Explorer

2026-10-25_783b02901545a84549231043c2ea2abd_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil

.exe 4.3MB

2026-10-25_783b02901545a84549231043c2ea2abd_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil

IMPHASH fe42ad63a25409a31c416de9c8559d12
SHA256 c2bf523b7d474b56aaf8df607a5f83fb48f8285dd866114341e49b6482766859
MD5 783b02901545a84549231043c2ea2abd
SHA1 64d194389d47a0bb5da7f785cec7dfb21763c66d
SHA512 d03294deeec037fcec94c9bb61eebcb65f362d159ccc009d39ce858faa920b1d5bba4d2e8ea6d2e3a4f75e87d93ae5169ddabb5c4cd87ef2d9f6942739ac5440
SSDEEP 98304:kB1n3QrllrrWU1n9lxkPdyoselwRj9LrYb8uFBRS7M:kLIrrWCnEnU9Li8
TLSH
T19226C012FB82C172E49201B1517AAB7B883DAE385734C5C7DBD03E7658306D17A3BB96
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

2337201

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

H:\pub_mlb8\rc_bugfix_master_v12_2505\Build\Release\WPSOffice\wtoolex\updateself_pro.pdb

kernel32

VerSetConditionMask CloseHandle GetLastError SetLastError HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap GetCurrentProcess GetCurrentThread GetSystemDirectoryW GetSystemWow64DirectoryW FreeLibrary GetProcAddress LoadLibraryW LocalFree VerifyVersionInfoW GetDateFormatW GetTimeFormatW GetCommandLineW GetEnvironmentVariableW SetEnvironmentVariableW GetFileAttributesW OpenProcess GlobalMemoryStatusEx GetNativeSystemInfo IsWow64Process GetModuleFileNameW GetPrivateProfileIntW GetPrivateProfileStringW GetComputerNameW MultiByteToWideChar WideCharToMultiByte GetUserDefaultLCID ExpandEnvironmentStringsW SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW DeleteFileW FindClose FindFirstFileW FindNextFileW RemoveDirectoryW Sleep GetModuleHandleW MoveFileExW GlobalFree CreateFileW WriteFile WaitNamedPipeW GetOverlappedResult CancelIo WaitForSingleObject GetLongPathNameW GetCurrentProcessId TerminateProcess GetExitCodeProcess ProcessIdToSessionId GetVersionExW FindResourceExW GetModuleHandleA LoadResource LockResource SizeofResource FindResourceW CopyFileW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetLocalTime ReadFile SetFilePointer SetEvent ResetEvent CreateEventW CreateThread GetExitCodeThread ResumeThread GetTickCount MoveFileW WritePrivateProfileStringW GetFileSize SetUnhandledExceptionFilter GetCurrentThreadId GetProcessId SetFileAttributesW GetPrivateProfileSectionW DecodePointer RaiseException InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetFileAttributesExW OutputDebugStringW ReleaseMutex CreateMutexW lstrlenA lstrlenW GetUserDefaultUILanguage CreateProcessW EnterCriticalSection LeaveCriticalSection GetCompressedFileSizeW CreateFileA CreatePipe DeviceIoControl GetStartupInfoW GetSystemTime LoadLibraryExW InitializeCriticalSection QueryPerformanceFrequency LoadLibraryA SleepEx QueryPerformanceCounter GetFullPathNameW FormatMessageW MoveFileExA GetEnvironmentVariableA CompareFileTime GetSystemTimeAsFileTime GetStdHandle GetFileType PeekNamedPipe WaitForMultipleObjects GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleExW SwitchToFiber DeleteFiber CreateFiber ConvertFiberToThread ConvertThreadToFiber SystemTimeToFileTime LocalFileTimeToFileTime SetFileTime FreeEnvironmentStringsW GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSectionEx TryEnterCriticalSection GetStringTypeW FormatMessageA FindFirstFileExW GetFileInformationByHandle SetEndOfFile SetFilePointerEx AreFileApisANSI GetFileInformationByHandleEx WaitForSingleObjectEx EncodePointer LCMapStringEx GetCPInfo IsDebuggerPresent UnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead RtlUnwind VirtualAlloc SetConsoleCtrlHandler SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ExitThread FreeLibraryAndExitThread GetDriveTypeW ExitProcess GetConsoleCP CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale EnumSystemLocalesW GetTimeZoneInformation FlushFileBuffers GetFileSizeEx SetStdHandle IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_783b02901545a84549231043c2ea2abd_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil

kernel32

generic