General
- Target 2026-07-09_7ae1578ab20f63ebf2eddf7a16ae6d2f_amadey_elex_glassworm_hellokitty_icedid_remcos_vidar
- Size 2.5MB
- Sample260709-r4fslact4p
- SHA256 378f88518970d727e5245eb6bea62ff226312cca649b89e153bcd9ef89660d02
- MD5 7ae1578ab20f63ebf2eddf7a16ae6d2f
- SHA1 15aa566654cc919e50a0e2596a897e26b924796b
- SHA512 094d679c4281ce0f469b3840f746ea2f594d59b30041c55ed45e4366bf1fdf061d9477852134447e6c2bd8973e38eb80e8b81a60bd8622d6e1c9e12223659c12
- SSDEEP 24576:GXqSd0YA6egadV0MKCsgGFj+Ifz3zvnXj/zXzvAAkGz8mvgtX79S+2bfh+RfmT00:Qj/usgGJkGYYpT0+TFiH7efPHDv
- TLSH T1F8C5BE01F3D666B6C47F0578847A96166775BC0503A6DBFB93D0A9BA2C333C04E327A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_7ae1578ab20f63ebf2eddf7a16ae6d2f_amadey_elex_glassworm_hellokitty_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_7ae1578ab20f63ebf2eddf7a16ae6d2f_amadey_elex_glassworm_hellokitty_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_7ae1578ab20f63ebf2eddf7a16ae6d2f_amadey_elex_glassworm_hellokitty_icedid_remcos_vidar
- Size 2.5MB
- SHA256 378f88518970d727e5245eb6bea62ff226312cca649b89e153bcd9ef89660d02
- MD5 7ae1578ab20f63ebf2eddf7a16ae6d2f
- SHA1 15aa566654cc919e50a0e2596a897e26b924796b
- SHA512 094d679c4281ce0f469b3840f746ea2f594d59b30041c55ed45e4366bf1fdf061d9477852134447e6c2bd8973e38eb80e8b81a60bd8622d6e1c9e12223659c12
- SSDEEP 24576:GXqSd0YA6egadV0MKCsgGFj+Ifz3zvnXj/zXzvAAkGz8mvgtX79S+2bfh+RfmT00:Qj/usgGJkGYYpT0+TFiH7efPHDv
- TLSH T1F8C5BE01F3D666B6C47F0578847A96166775BC0503A6DBFB93D0A9BA2C333C04E327A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.