General
- Target 2026-06-26_433e09bddd37a3d7febb81d5586c45dc_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 23.3MB
- Sample260629-t2a6fabv3k
- SHA256 c8b1e2f514b7a858e0da0912c2b12564aa2efa086d97f88d607f31fb94a199fd
- MD5 433e09bddd37a3d7febb81d5586c45dc
- SHA1 33e66605be17981c5c6c7a4bc1d12aa2fc9c5214
- SHA512 2aca62a8255034ed4139553850f5da4392ff35609f6abff625395a18768f10246644137d1ed02f5abbd9b1265835379d6fe0be20686b8e86289841b515019fb0
- SSDEEP 393216:YuGBCLEfWX/2T45LEfWX/BLEfWX/KLEfWX/4LEfWX/z:Yu3Ip45I0ILILIY
- TLSH T166372305B7C5E662E4BB0631C879632477B0BC944B22C7AF2790BA3E2C717D06E65397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_433e09bddd37a3d7febb81d5586c45dc_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_433e09bddd37a3d7febb81d5586c45dc_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_433e09bddd37a3d7febb81d5586c45dc_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 23.3MB
- SHA256 c8b1e2f514b7a858e0da0912c2b12564aa2efa086d97f88d607f31fb94a199fd
- MD5 433e09bddd37a3d7febb81d5586c45dc
- SHA1 33e66605be17981c5c6c7a4bc1d12aa2fc9c5214
- SHA512 2aca62a8255034ed4139553850f5da4392ff35609f6abff625395a18768f10246644137d1ed02f5abbd9b1265835379d6fe0be20686b8e86289841b515019fb0
- SSDEEP 393216:YuGBCLEfWX/2T45LEfWX/BLEfWX/KLEfWX/4LEfWX/z:Yu3Ip45I0ILILIY
- TLSH T166372305B7C5E662E4BB0631C879632477B0BC944B22C7AF2790BA3E2C717D06E65397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.