General
- Target 2026-07-04_a8cf775cdc8ca7526424abaff649a32c_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.3MB
- Sample260704-zd2alsht3j
- SHA256 33b9f83fe267104e07898c2a2ff43827e1718eac4542137c41a3b567ecb20294
- MD5 a8cf775cdc8ca7526424abaff649a32c
- SHA1 6a283e693d498fbec328c71e002a3692d13adcda
- SHA512 eb7b6f628106816913229309cb033df0e660748d6b134591293b8e5c80790c53c567d483abd5c1e00943497c606ebb30543857fffdf6f135bfa0f32c79c2c478
- SSDEEP 196608:Pc8fefPGoHQjDSOgtNPCDoHQjDSOgtaDoHQjDSOgtfDoHQjDSOgtqDoHQjDSOgt+:E0owXSnOowXSwowXS9owXSIowXSI
- TLSH T1ACE61211B3D694BAD4BB0638D87A62655235BC148762C3FF6790BD6E2D32BC09D32363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_a8cf775cdc8ca7526424abaff649a32c_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_a8cf775cdc8ca7526424abaff649a32c_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_a8cf775cdc8ca7526424abaff649a32c_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.3MB
- SHA256 33b9f83fe267104e07898c2a2ff43827e1718eac4542137c41a3b567ecb20294
- MD5 a8cf775cdc8ca7526424abaff649a32c
- SHA1 6a283e693d498fbec328c71e002a3692d13adcda
- SHA512 eb7b6f628106816913229309cb033df0e660748d6b134591293b8e5c80790c53c567d483abd5c1e00943497c606ebb30543857fffdf6f135bfa0f32c79c2c478
- SSDEEP 196608:Pc8fefPGoHQjDSOgtNPCDoHQjDSOgtaDoHQjDSOgtfDoHQjDSOgtqDoHQjDSOgt+:E0owXSnOowXSwowXS9owXSIowXSI
- TLSH T1ACE61211B3D694BAD4BB0638D87A62655235BC148762C3FF6790BD6E2D32BC09D32363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.