General
- Target 2026-06-04_a27d671c5d2d14cadc619126aeca39f9_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 16.4MB
- Sample260604-n137yaex5p
- SHA256 8f9ec3c716c8b15e67448702dd6d1fdc897361a10c7141b6de6669de091bf529
- MD5 a27d671c5d2d14cadc619126aeca39f9
- SHA1 31a6e1414f625350e72b9cebe4f0eeb8ba0c17d5
- SHA512 3a3eef87a1f3a4042d6a668b517750e0db9be47e440f3d4434c6344506a5913d19f2535a3a52b753e4d348ca1d6be7cbaee5e7aae11a4abc9646ded5c8ecdfcf
- SSDEEP 393216:jCXvI5MvHxKJECXvI5MvHxaCXvI5MvHxmCXvI5MvHxECXvI5MvHxhCXvI5MvHxz:jZ6HxnZ6HxaZ6HxmZ6HxEZ6HxhZ6Hxz
- TLSH T1F4071211B3E585F6E0BF1678E87952654672FC140B26C2AF13A4796E2C32BC08E72777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_a27d671c5d2d14cadc619126aeca39f9_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_a27d671c5d2d14cadc619126aeca39f9_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_a27d671c5d2d14cadc619126aeca39f9_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 16.4MB
- SHA256 8f9ec3c716c8b15e67448702dd6d1fdc897361a10c7141b6de6669de091bf529
- MD5 a27d671c5d2d14cadc619126aeca39f9
- SHA1 31a6e1414f625350e72b9cebe4f0eeb8ba0c17d5
- SHA512 3a3eef87a1f3a4042d6a668b517750e0db9be47e440f3d4434c6344506a5913d19f2535a3a52b753e4d348ca1d6be7cbaee5e7aae11a4abc9646ded5c8ecdfcf
- SSDEEP 393216:jCXvI5MvHxKJECXvI5MvHxaCXvI5MvHxmCXvI5MvHxECXvI5MvHxhCXvI5MvHxz:jZ6HxnZ6HxaZ6HxmZ6HxEZ6HxhZ6Hxz
- TLSH T1F4071211B3E585F6E0BF1678E87952654672FC140B26C2AF13A4796E2C32BC08E72777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.