General
- Target 2026-07-06_ecf5ffe25744b0f1ede3710900885a07_amadey_elex_glassworm_hellokitty_icedid_remcos_vidar
- Size 2.4MB
- Sample260706-yakb9acv2w
- SHA256 0e87d1c18cc90b13c9d76945e647a7033fb30b66e8a7e2ceeb3264fed2da9014
- MD5 ecf5ffe25744b0f1ede3710900885a07
- SHA1 ef630acbff2e0e3e3ba9878ec36ed508dba1d6e2
- SHA512 5228ae20e519f35b1cfdf63adba5948ad1d452cc2ac667b9afce3fc335bc077e4313ca910c17ad01ae5963e315dfce390d55d483b156769f4b37717cacc61fff
- SSDEEP 24576:VBubA9DS2XINpgFj+Ifz3zvnXj/zXzvAAkGz8mvgtX79S+2bfh+RfmT01krTFiH6:bDupgJkGYYpT0+TFiH7efP0Q97iO
- TLSH T118C5AD01F3D265F5C46F0A3884BA421AA774BC081315DBFB56D4A9A93E337C05E36BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_ecf5ffe25744b0f1ede3710900885a07_amadey_elex_glassworm_hellokitty_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_ecf5ffe25744b0f1ede3710900885a07_amadey_elex_glassworm_hellokitty_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_ecf5ffe25744b0f1ede3710900885a07_amadey_elex_glassworm_hellokitty_icedid_remcos_vidar
- Size 2.4MB
- SHA256 0e87d1c18cc90b13c9d76945e647a7033fb30b66e8a7e2ceeb3264fed2da9014
- MD5 ecf5ffe25744b0f1ede3710900885a07
- SHA1 ef630acbff2e0e3e3ba9878ec36ed508dba1d6e2
- SHA512 5228ae20e519f35b1cfdf63adba5948ad1d452cc2ac667b9afce3fc335bc077e4313ca910c17ad01ae5963e315dfce390d55d483b156769f4b37717cacc61fff
- SSDEEP 24576:VBubA9DS2XINpgFj+Ifz3zvnXj/zXzvAAkGz8mvgtX79S+2bfh+RfmT01krTFiH6:bDupgJkGYYpT0+TFiH7efP0Q97iO
- TLSH T118C5AD01F3D265F5C46F0A3884BA421AA774BC081315DBFB56D4A9A93E337C05E36BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.