General
- Target 2026-07-31_0e5e9bd5bc3aea61f293b6cc27bcf0f4_amadey_elex_glassworm_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 14.1MB
- Sample260731-1w26ashc75
- SHA256 cc751fe66b1fe4bb601f84748ecdc9f6631086f165347b3606c241e0dc57abd9
- MD5 0e5e9bd5bc3aea61f293b6cc27bcf0f4
- SHA1 95601c93605d04580e7b1c94a1bce88d7af8011e
- SHA512 2971d3cb783a1d10322438b59318694a3807ee9bcb5e87fa27af5da8c39219b1c1133954956cf7dac40428b86b6a14a17022ac24aeb6cd41024773222991d0e4
- SSDEEP 196608:UQfefP+x+kLGB1e+Z3/S+kLGB1I+kLGB1C+kLGB1m+kLGB1a:UrkqBoSkqB3kqBZkqBlkqBM
- TLSH T10AE61212F3D58575D5BB0A38E8B946A65A34BC054712C6BF53A8B96D3D32BC09E32333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_0e5e9bd5bc3aea61f293b6cc27bcf0f4_amadey_elex_glassworm_icedid_luca-stealer_njrat_ransomhu.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_0e5e9bd5bc3aea61f293b6cc27bcf0f4_amadey_elex_glassworm_icedid_luca-stealer_njrat_ransomhu.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_0e5e9bd5bc3aea61f293b6cc27bcf0f4_amadey_elex_glassworm_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 14.1MB
- SHA256 cc751fe66b1fe4bb601f84748ecdc9f6631086f165347b3606c241e0dc57abd9
- MD5 0e5e9bd5bc3aea61f293b6cc27bcf0f4
- SHA1 95601c93605d04580e7b1c94a1bce88d7af8011e
- SHA512 2971d3cb783a1d10322438b59318694a3807ee9bcb5e87fa27af5da8c39219b1c1133954956cf7dac40428b86b6a14a17022ac24aeb6cd41024773222991d0e4
- SSDEEP 196608:UQfefP+x+kLGB1e+Z3/S+kLGB1I+kLGB1C+kLGB1m+kLGB1a:UrkqBoSkqB3kqBZkqBlkqBM
- TLSH T10AE61212F3D58575D5BB0A38E8B946A65A34BC054712C6BF53A8B96D3D32BC09E32333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.