General
- Target 2026-06-26_8702efd8360b43414b0a756442c20f12_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 12.2MB
- Sample260629-rn6dbahs4m
- SHA256 535d0c6064bdbf460d59604e672c994f9014db39ef7e719ea176932087348242
- MD5 8702efd8360b43414b0a756442c20f12
- SHA1 103d8835c07f5470888fd8bd66285ba692c77d66
- SHA512 ffd9bc3cde006a342ad38088678d2cffda366995bca9be2a3bcf905a2859ab99302303514c0df3fa61e63496e8a074007f6c7646d6cd8901252e626eb2301ec3
- SSDEEP 196608:ic8fefP1oHQjDSOgtUPUDoHQjDSOgtSDoHQjDSOgtMDoHQjDSOgtx:jvowXS6gowXSUowXS+owXSn
- TLSH T168D61211B3D694BAD4BB0638D87A52655235BC148762C3BF6790BD6E2D32BC09E32373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_8702efd8360b43414b0a756442c20f12_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_8702efd8360b43414b0a756442c20f12_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_8702efd8360b43414b0a756442c20f12_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 12.2MB
- SHA256 535d0c6064bdbf460d59604e672c994f9014db39ef7e719ea176932087348242
- MD5 8702efd8360b43414b0a756442c20f12
- SHA1 103d8835c07f5470888fd8bd66285ba692c77d66
- SHA512 ffd9bc3cde006a342ad38088678d2cffda366995bca9be2a3bcf905a2859ab99302303514c0df3fa61e63496e8a074007f6c7646d6cd8901252e626eb2301ec3
- SSDEEP 196608:ic8fefP1oHQjDSOgtUPUDoHQjDSOgtSDoHQjDSOgtMDoHQjDSOgtx:jvowXS6gowXSUowXS+owXSn
- TLSH T168D61211B3D694BAD4BB0638D87A52655235BC148762C3BF6790BD6E2D32BC09E32373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.