General
- Target 2026-11-01_eb22d0cff264ef477b5b6c77be76430b_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat_play_smoke-loader
- Size 1.4MB
- Sample261102-e2gwnag17j
- SHA256 a42b50c5da2d36505ec02c89b55cc091c6bb0ad12452bb56f98069724c03b32f
- MD5 eb22d0cff264ef477b5b6c77be76430b
- SHA1 d5e7934c8773c5383e77c67106e3b28e113cf8a0
- SHA512 9bdb701abd7749ce9501bb2ea297e9569ce9036667c3ea8b92a59c0bba831dc54730b961d09c2835fb3d59f7b58a148c62779386c8a6efd34c1abbe4fb00cc9d
- SSDEEP 24576:/O1Iz98QUZCO5OK+N9NjzABgioiNV99L5S1fd0b:sIRrUZCO5OKE9NjzQgilV995S1V0
- TLSH T16F65020275E2C8B3E6B209364C78AA6669FD7D700522AF7F53D40D2EDF31A81C625763
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_eb22d0cff264ef477b5b6c77be76430b_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat_play_smoke-loader.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_eb22d0cff264ef477b5b6c77be76430b_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat_play_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_eb22d0cff264ef477b5b6c77be76430b_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat_play_smoke-loader
- Size 1.4MB
- SHA256 a42b50c5da2d36505ec02c89b55cc091c6bb0ad12452bb56f98069724c03b32f
- MD5 eb22d0cff264ef477b5b6c77be76430b
- SHA1 d5e7934c8773c5383e77c67106e3b28e113cf8a0
- SHA512 9bdb701abd7749ce9501bb2ea297e9569ce9036667c3ea8b92a59c0bba831dc54730b961d09c2835fb3d59f7b58a148c62779386c8a6efd34c1abbe4fb00cc9d
- SSDEEP 24576:/O1Iz98QUZCO5OK+N9NjzABgioiNV99L5S1fd0b:sIRrUZCO5OKE9NjzQgilV995S1V0
- TLSH T16F65020275E2C8B3E6B209364C78AA6669FD7D700522AF7F53D40D2EDF31A81C625763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1