General
- Target 2026-07-01_54ca348df2c86fbb5d5faaa6cf15c208_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.3MB
- Sample260701-ls6a8aaz2l
- SHA256 51f1f5b626213c31fd363e64181a6a25e34eba434bfad56357636a9f44e5d631
- MD5 54ca348df2c86fbb5d5faaa6cf15c208
- SHA1 2c98908c6649da497f8a114b433764c69291f136
- SHA512 ee946fa3f11770e11905e29225789722ba6a2ba2e4708bf68488df16ceb36adbaec667b4db5e1c02c2fff958199fa3dc8e2fadc15f2d22bc7bfec24922820ef1
- SSDEEP 196608:LcbxfefPaek1luG7rruek1luGhek1luGJek1luGaek1luGH:gbi7G7z7Gw7GI7GP7GH
- TLSH T10DE61211B3C695BAD0BF0A38E43A51656675BC055766C7BF2390B96E2C32FC09E36323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_54ca348df2c86fbb5d5faaa6cf15c208_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_54ca348df2c86fbb5d5faaa6cf15c208_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_54ca348df2c86fbb5d5faaa6cf15c208_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.3MB
- SHA256 51f1f5b626213c31fd363e64181a6a25e34eba434bfad56357636a9f44e5d631
- MD5 54ca348df2c86fbb5d5faaa6cf15c208
- SHA1 2c98908c6649da497f8a114b433764c69291f136
- SHA512 ee946fa3f11770e11905e29225789722ba6a2ba2e4708bf68488df16ceb36adbaec667b4db5e1c02c2fff958199fa3dc8e2fadc15f2d22bc7bfec24922820ef1
- SSDEEP 196608:LcbxfefPaek1luG7rruek1luGhek1luGJek1luGaek1luGH:gbi7G7z7Gw7GI7GP7GH
- TLSH T10DE61211B3C695BAD0BF0A38E43A51656675BC055766C7BF2390B96E2C32FC09E36323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.