General
- Target 2026-11-09_34423bb9411ccd0253b6f346467cdcc7_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat_redline-stealer
- Size 748KB
- Sample261110-2y3ehsxsaz
- SHA256 8d6a310318450ddfd19faefd40cac1c22898347d533e9197fde473102fafcb34
- MD5 34423bb9411ccd0253b6f346467cdcc7
- SHA1 e4c2c6273f11c9d61b5093d1d58cee777421bb87
- SHA512 7a813e3db6606b60d6cff513f0e4fd7ad19e36265770fa826955f2d52699e8d8ce8c18230475077ca931d59d0f7818a9ac7fc9acdb4d2fa20cd2f4729d22b45b
- SSDEEP 12288:H3oVBakbhc7+4Vx/XpyXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/T:81UV1pysqjnhMgeiCl7G0nehbGZpbD
- TLSH T17EF4022979C2C073D876143405E4E679682E7D711F2458FBA7C96BBEAE306D08B38937
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-09_34423bb9411ccd0253b6f346467cdcc7_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat_redline-stealer.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_34423bb9411ccd0253b6f346467cdcc7_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat_redline-stealer
- Size 748KB
- SHA256 8d6a310318450ddfd19faefd40cac1c22898347d533e9197fde473102fafcb34
- MD5 34423bb9411ccd0253b6f346467cdcc7
- SHA1 e4c2c6273f11c9d61b5093d1d58cee777421bb87
- SHA512 7a813e3db6606b60d6cff513f0e4fd7ad19e36265770fa826955f2d52699e8d8ce8c18230475077ca931d59d0f7818a9ac7fc9acdb4d2fa20cd2f4729d22b45b
- SSDEEP 12288:H3oVBakbhc7+4Vx/XpyXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/T:81UV1pysqjnhMgeiCl7G0nehbGZpbD
- TLSH T17EF4022979C2C073D876143405E4E679682E7D711F2458FBA7C96BBEAE306D08B38937
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1