General
- Target 2026-07-01_427838f6cdc3d55d993f8b1e3e76840b_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.3MB
- Sample260701-vrpfraaz9p
- SHA256 9af47b78ccf24d492f905f7730fe65d7334b4c1faf2f4a3ca8260b62ebf8308f
- MD5 427838f6cdc3d55d993f8b1e3e76840b
- SHA1 d4a466cd0391bc8069a971cd5c2914981442b53d
- SHA512 6057716a8da57c09e30b08df68667e3e017bb8d4200332dce7c3598cb17e4a511e73b0ef6283b8663ee508a9d12bcd9125965394eee2c9e697f0f9b191890127
- SSDEEP 196608:Cc8fefP7fMndedYZTr1KNKP1fMndedYZTr1KNhfMndedYZTr1KNPfMndedYZTr1E:DhETB0i1ETB0hETB0PETB0hETB0v
- TLSH T1F4E61211B3D6956AD0AF0678D87952265A71BC044B26C7BF5394B97E2D32FC08E323B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_427838f6cdc3d55d993f8b1e3e76840b_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_427838f6cdc3d55d993f8b1e3e76840b_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_427838f6cdc3d55d993f8b1e3e76840b_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.3MB
- SHA256 9af47b78ccf24d492f905f7730fe65d7334b4c1faf2f4a3ca8260b62ebf8308f
- MD5 427838f6cdc3d55d993f8b1e3e76840b
- SHA1 d4a466cd0391bc8069a971cd5c2914981442b53d
- SHA512 6057716a8da57c09e30b08df68667e3e017bb8d4200332dce7c3598cb17e4a511e73b0ef6283b8663ee508a9d12bcd9125965394eee2c9e697f0f9b191890127
- SSDEEP 196608:Cc8fefP7fMndedYZTr1KNKP1fMndedYZTr1KNhfMndedYZTr1KNPfMndedYZTr1E:DhETB0i1ETB0hETB0PETB0hETB0v
- TLSH T1F4E61211B3D6956AD0AF0678D87952265A71BC044B26C7BF5394B97E2D32FC08E323B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.