General
- Target 2026-07-03_695aafa7a5c03ca91bef48853ee69b2c_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.3MB
- Sample260703-pq159shs8v
- SHA256 857e20719fe9a74e6c7dea5cbb21f0817ef8f0d4bf44b303812e177c49d147a2
- MD5 695aafa7a5c03ca91bef48853ee69b2c
- SHA1 ee228e9ca09c9249e2c2937ffd0a8e372377032c
- SHA512 086837c41b0e3fd466dc324cdce0caefce083adb7c6dad595f7492c35305ae15c397bc195b01e7be80e6b5616df1a30831f38e12e3c191fcba18c691cbf9cbbd
- SSDEEP 393216:7CXvI5MvHxwJbCXvI5MvHxaCXvI5MvHxKCXvI5MvHxgCXvI5MvHxX:7Z6HxaZ6HxaZ6HxKZ6HxgZ6HxX
- TLSH T165E62211B3E585B6D0BF1678E87D92654632FC144B26C2AF53A4796E2C32BC08E32777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_695aafa7a5c03ca91bef48853ee69b2c_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_695aafa7a5c03ca91bef48853ee69b2c_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_695aafa7a5c03ca91bef48853ee69b2c_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.3MB
- SHA256 857e20719fe9a74e6c7dea5cbb21f0817ef8f0d4bf44b303812e177c49d147a2
- MD5 695aafa7a5c03ca91bef48853ee69b2c
- SHA1 ee228e9ca09c9249e2c2937ffd0a8e372377032c
- SHA512 086837c41b0e3fd466dc324cdce0caefce083adb7c6dad595f7492c35305ae15c397bc195b01e7be80e6b5616df1a30831f38e12e3c191fcba18c691cbf9cbbd
- SSDEEP 393216:7CXvI5MvHxwJbCXvI5MvHxaCXvI5MvHxKCXvI5MvHxgCXvI5MvHxX:7Z6HxaZ6HxaZ6HxKZ6HxgZ6HxX
- TLSH T165E62211B3E585B6D0BF1678E87D92654632FC144B26C2AF53A4796E2C32BC08E32777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.