General
- Target 2026-07-29_7a0baec90553ae75f37fd509512d85ab_amadey_elex_glassworm_icedid_karagany_luca-stealer_njrat_ransomhub_remcos_rhadamanthys_silence_smoke-loader_stop_vidar
- Size 4.1MB
- Sample260729-mzl2laen4v
- SHA256 4113a34cce5490e1fac4bc6a329ca1fb34437437eca824c57d773647f4722afa
- MD5 7a0baec90553ae75f37fd509512d85ab
- SHA1 fbddf2d66664ff8b6b8dbe4f963278989ead6385
- SHA512 7023bf1f689e0ca956f64dbf10e765fdca67ac189852c3acf21bbc9d40cc1f63a95e92e2eb555f25ced1a9f710719be0d9933a1e753963395ecc70bd962bff02
- SSDEEP 49152:dfKi963PSumT0+TFiH7efPp3Z0jvChATiNAYhRnfMqcZyfXgB7Y0DBX7muVl+MXq:xn6+6efPYuhATiSYhRUq9fQNXkAGOnA/
- TLSH T1C916D012F3D19176D0BF0539D87A46669B74BC088262C7AF97A4BD693D33BC04E26372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-29_7a0baec90553ae75f37fd509512d85ab_amadey_elex_glassworm_icedid_karagany_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_7a0baec90553ae75f37fd509512d85ab_amadey_elex_glassworm_icedid_karagany_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_7a0baec90553ae75f37fd509512d85ab_amadey_elex_glassworm_icedid_karagany_luca-stealer_njrat_ransomhub_remcos_rhadamanthys_silence_smoke-loader_stop_vidar
- Size 4.1MB
- SHA256 4113a34cce5490e1fac4bc6a329ca1fb34437437eca824c57d773647f4722afa
- MD5 7a0baec90553ae75f37fd509512d85ab
- SHA1 fbddf2d66664ff8b6b8dbe4f963278989ead6385
- SHA512 7023bf1f689e0ca956f64dbf10e765fdca67ac189852c3acf21bbc9d40cc1f63a95e92e2eb555f25ced1a9f710719be0d9933a1e753963395ecc70bd962bff02
- SSDEEP 49152:dfKi963PSumT0+TFiH7efPp3Z0jvChATiNAYhRnfMqcZyfXgB7Y0DBX7muVl+MXq:xn6+6efPYuhATiSYhRUq9fQNXkAGOnA/
- TLSH T1C916D012F3D19176D0BF0539D87A46669B74BC088262C7AF97A4BD693D33BC04E26372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.