2026-11-09_34423bb9411ccd0253b6f346467cdcc7_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat_redline-stealer

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-09_34423bb9411ccd0253b6f346467cdcc7_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat_redline-stealer
Size 748KB
Sample261110-2y3ehsxsaz
SHA256 8d6a310318450ddfd19faefd40cac1c22898347d533e9197fde473102fafcb34
MD5 34423bb9411ccd0253b6f346467cdcc7
SHA1 e4c2c6273f11c9d61b5093d1d58cee777421bb87
SHA512 7a813e3db6606b60d6cff513f0e4fd7ad19e36265770fa826955f2d52699e8d8ce8c18230475077ca931d59d0f7818a9ac7fc9acdb4d2fa20cd2f4729d22b45b
SSDEEP 12288:H3oVBakbhc7+4Vx/XpyXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/T:81UV1pysqjnhMgeiCl7G0nehbGZpbD
TLSH
T17EF4022979C2C073D876143405E4E679682E7D711F2458FBA7C96BBEAE306D08B38937
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_34423bb9411ccd0253b6f346467cdcc7_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat_redline-stealer

File Explorer

2026-11-09_34423bb9411ccd0253b6f346467cdcc7_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat_redline-stealer

.exe 748KB

2026-11-09_34423bb9411ccd0253b6f346467cdcc7_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat_redline-stealer

IMPHASH cfce8ffd9eade90ddb960f55339cf627
SHA256 8d6a310318450ddfd19faefd40cac1c22898347d533e9197fde473102fafcb34
MD5 34423bb9411ccd0253b6f346467cdcc7
SHA1 e4c2c6273f11c9d61b5093d1d58cee777421bb87
SHA512 7a813e3db6606b60d6cff513f0e4fd7ad19e36265770fa826955f2d52699e8d8ce8c18230475077ca931d59d0f7818a9ac7fc9acdb4d2fa20cd2f4729d22b45b
SSDEEP 12288:H3oVBakbhc7+4Vx/XpyXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/T:81UV1pysqjnhMgeiCl7G0nehbGZpbD
TLSH
T17EF4022979C2C073D876143405E4E679682E7D711F2458FBA7C96BBEAE306D08B38937
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19711

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mediaget\mediaget-mini-installer\mediaget-admin-proxy\bin\Release\mediaget-admin-proxy.pdb

kernel32

GetProcessHeap WideCharToMultiByte GetTickCount ReadFile WriteFile WaitForMultipleObjects WaitForSingleObject CreateFileW GetCurrentProcessId SetEvent CreateThread ResetEvent CreateProcessW WriteConsoleW HeapSize GetConsoleMode LocalFree K32EnumProcesses HeapAlloc CloseHandle K32GetModuleBaseNameW GetLastError GetTickCount64 FormatMessageW Sleep MultiByteToWideChar OpenProcess TerminateProcess CreateEventW HeapFree GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetFileSizeEx SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapReAlloc GetFileType CompareStringW LCMapStringW FindClose FindFirstFileExW FindNextFileW

user32

MessageBoxW wsprintfW

advapi32

RegCreateKeyExW RegSetValueExW CloseServiceHandle OpenSCManagerW AllocateAndInitializeSid DeleteService ControlService EnumDependentServicesW FreeSid CheckTokenMembership OpenServiceW QueryServiceStatusEx

shell32

ShellExecuteW

ole32

CoInitialize CLSIDFromProgID OleRun CLSIDFromString CoCreateInstance

oleaut32

SysFreeString SysAllocString GetErrorInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-09_34423bb9411ccd0253b6f346467cdcc7_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat_redline-stealer

kernel32

user32

advapi32

shell32

ole32

oleaut32

generic