General
- Target 2026-07-02_4a01c8331e54c201eb40dd1234c8d1b5_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 26.0MB
- Sample260702-zk2vqaew7w
- SHA256 e5bb43c1b9a5519badbcb4b12cc0b7c5bca5441d77a9d8c4840deafa1a29613b
- MD5 4a01c8331e54c201eb40dd1234c8d1b5
- SHA1 94d0569991e66eddbeda116a81c7efe68027ba7e
- SHA512 3be9ab00a93d6f9cf705181e182719bbc2571c3bd9b9bc068f233f39b0d36bd26b41218af19c8205f0e22901dd0a9006ed48d31f2434844083c68c3a759af421
- SSDEEP 393216:l96CKTuAUqLpgttoTuAUqLmTuAUqL9TuAUqL+TuAUqLITuAUqLZTuAUqLK:TJKTuAmoTuVTuyTu/TujTuuTup
- TLSH T19C572305B7D95527E4BF07369C3A5324A775BC414B32C7AF52983A2E1C31BC0AE253AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_4a01c8331e54c201eb40dd1234c8d1b5_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_4a01c8331e54c201eb40dd1234c8d1b5_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_4a01c8331e54c201eb40dd1234c8d1b5_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 26.0MB
- SHA256 e5bb43c1b9a5519badbcb4b12cc0b7c5bca5441d77a9d8c4840deafa1a29613b
- MD5 4a01c8331e54c201eb40dd1234c8d1b5
- SHA1 94d0569991e66eddbeda116a81c7efe68027ba7e
- SHA512 3be9ab00a93d6f9cf705181e182719bbc2571c3bd9b9bc068f233f39b0d36bd26b41218af19c8205f0e22901dd0a9006ed48d31f2434844083c68c3a759af421
- SSDEEP 393216:l96CKTuAUqLpgttoTuAUqLmTuAUqL9TuAUqL+TuAUqLITuAUqLZTuAUqLK:TJKTuAmoTuVTuyTu/TujTuuTup
- TLSH T19C572305B7D95527E4BF07369C3A5324A775BC414B32C7AF52983A2E1C31BC0AE253AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.