General
- Target 2026-08-01_ec612b98a0d81096223f79be94f0202b_amadey_elex_glassworm_hammertoss_icedid_luca-stealer_njrat
- Size 7.8MB
- Sample260801-cx9prscc38
- SHA256 395cf636806bd8e925c824cb67fdb93da0a8be35086273ffa4d4e55fb0e45556
- MD5 ec612b98a0d81096223f79be94f0202b
- SHA1 32c6667433795d57b014fb793087206dda91281a
- SHA512 605d10a3c33456032ee099ef18292a5dde4e57bcdb9bc842ac5cb8c9a24aa2b85ea9a136933c5e734f08bf5f49813dc409aff507d666f9bbbc12c687b11e2c78
- SSDEEP 98304:cZ7QkPeU/LGz6I5P6y4wjPgHeKSQIYKViWgEALlBg3tSbCPgp+w:cZ0kGtZ4wcH4QlKVKEABBg3HYpp
- TLSH T13186AE06F7E11081F5BAC67584AB3129FD3A74E11324DAC762C25A9E0F21BF4BC3A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_ec612b98a0d81096223f79be94f0202b_amadey_elex_glassworm_hammertoss_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_ec612b98a0d81096223f79be94f0202b_amadey_elex_glassworm_hammertoss_icedid_luca-stealer_njrat
- Size 7.8MB
- SHA256 395cf636806bd8e925c824cb67fdb93da0a8be35086273ffa4d4e55fb0e45556
- MD5 ec612b98a0d81096223f79be94f0202b
- SHA1 32c6667433795d57b014fb793087206dda91281a
- SHA512 605d10a3c33456032ee099ef18292a5dde4e57bcdb9bc842ac5cb8c9a24aa2b85ea9a136933c5e734f08bf5f49813dc409aff507d666f9bbbc12c687b11e2c78
- SSDEEP 98304:cZ7QkPeU/LGz6I5P6y4wjPgHeKSQIYKViWgEALlBg3tSbCPgp+w:cZ0kGtZ4wcH4QlKVKEABBg3HYpp
- TLSH T13186AE06F7E11081F5BAC67584AB3129FD3A74E11324DAC762C25A9E0F21BF4BC3A756
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables manipulated with Fody
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE