General
- Target 2026-07-08_0f2a138539adccef72993febb6c4294e_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 16.4MB
- Sample260708-sr454aat4q
- SHA256 48b757bfe18db83c5056dfd1dec46fdec6e2f4510748331be941ac6c76eca4ff
- MD5 0f2a138539adccef72993febb6c4294e
- SHA1 04574c33b65d1b092b85c7128827b2f06810fed7
- SHA512 d1492e7dfd72ff8b2cc45c795f16aaed378594e1f01aff6b9b3e77ae43ee8521c028dd216d2f36c1613023e3ccbc9e158f9b2214fb47ad6ebe0e40b340b2726c
- SSDEEP 393216:8CXvI5MvHxmJPCXvI5MvHxaCXvI5MvHxkCXvI5MvHxkCXvI5MvHxXCXvI5MvHxS:8Z6HxcZ6HxaZ6HxkZ6HxkZ6HxXZ6HxS
- TLSH T12B072311B7E585B6D0BF1678E8BD92654632FC144B25C2AF13A4796E2C32BC08E32777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_0f2a138539adccef72993febb6c4294e_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_0f2a138539adccef72993febb6c4294e_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_0f2a138539adccef72993febb6c4294e_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 16.4MB
- SHA256 48b757bfe18db83c5056dfd1dec46fdec6e2f4510748331be941ac6c76eca4ff
- MD5 0f2a138539adccef72993febb6c4294e
- SHA1 04574c33b65d1b092b85c7128827b2f06810fed7
- SHA512 d1492e7dfd72ff8b2cc45c795f16aaed378594e1f01aff6b9b3e77ae43ee8521c028dd216d2f36c1613023e3ccbc9e158f9b2214fb47ad6ebe0e40b340b2726c
- SSDEEP 393216:8CXvI5MvHxmJPCXvI5MvHxaCXvI5MvHxkCXvI5MvHxkCXvI5MvHxXCXvI5MvHxS:8Z6HxcZ6HxaZ6HxkZ6HxkZ6HxXZ6HxS
- TLSH T12B072311B7E585B6D0BF1678E8BD92654632FC144B25C2AF13A4796E2C32BC08E32777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.