General
- Target 2026-07-27_8cbb8d5e9603a4d7f94cf159a6060603_amadey_elex_glassworm_hammertoss_icedid_luca-stealer_njrat
- Size 6.7MB
- Sample260727-2amddssdpf
- SHA256 4065be22361ce83d6484a553aff56b10b408125cf32112e56a0f660801a18c77
- MD5 8cbb8d5e9603a4d7f94cf159a6060603
- SHA1 6d7367187cd80e6ce2a851b231911207c9084fb7
- SHA512 7e29b880ad95d73f16d89d8aefbdb9f3c5036462518f69890d8b126c5878886fd60bea0245a56ca3e4d126761e7110b38188b909b8821d57524a1190524f2e95
- SSDEEP 49152:t6FZqBxMQ9SPM0q7g/7P3f7iTLabeO8hdEM6HDzN6KHjASoTTlMYnzYRm5YTHyLn:UZ7QkPeU/LGz6I5P6ycEm1Qsr5ISEf3B
- TLSH T136669D06F7E11081F5BAC67584AB3129FD3A74E11324DAC762C25A9E0F21BF4BC3A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_8cbb8d5e9603a4d7f94cf159a6060603_amadey_elex_glassworm_hammertoss_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_8cbb8d5e9603a4d7f94cf159a6060603_amadey_elex_glassworm_hammertoss_icedid_luca-stealer_njrat
- Size 6.7MB
- SHA256 4065be22361ce83d6484a553aff56b10b408125cf32112e56a0f660801a18c77
- MD5 8cbb8d5e9603a4d7f94cf159a6060603
- SHA1 6d7367187cd80e6ce2a851b231911207c9084fb7
- SHA512 7e29b880ad95d73f16d89d8aefbdb9f3c5036462518f69890d8b126c5878886fd60bea0245a56ca3e4d126761e7110b38188b909b8821d57524a1190524f2e95
- SSDEEP 49152:t6FZqBxMQ9SPM0q7g/7P3f7iTLabeO8hdEM6HDzN6KHjASoTTlMYnzYRm5YTHyLn:UZ7QkPeU/LGz6I5P6ycEm1Qsr5ISEf3B
- TLSH T136669D06F7E11081F5BAC67584AB3129FD3A74E11324DAC762C25A9E0F21BF4BC3A756
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables manipulated with Fody
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE