General
- Target 2026-08-01_99e0abf0ff77c48653ef7ed17c6c846f_amadey_elex_glassworm_hammertoss_icedid_luca-stealer_njrat
- Size 7.3MB
- Sample260801-destzacf23
- SHA256 bda499571862d40959b18c8055bb00324b8f2701d81c3f133eba0362d0ca78c6
- MD5 99e0abf0ff77c48653ef7ed17c6c846f
- SHA1 23cb35a873ce02c53baddb500fdad6c40facebc4
- SHA512 17a36a9d5034e7db321e7de346d40e28f31a10fbe2d75477ed9ee5acb2b231df19d71dd561a5381bda9c5a9c8cacdcc408bee621ec50344fc7d9dd91374f43f4
- SSDEEP 98304:aZ7QkPeU/LGz6I5P6yjwjPgHeKSQIYKViWgEALlBg3tSF:aZ0kGtZjwcH4QlKVKEABBg3i
- TLSH T11676AE06F7E11081F5BAC67584AB3129FD3A74E11324DAC762C25A9E0F21BF4BC3A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_99e0abf0ff77c48653ef7ed17c6c846f_amadey_elex_glassworm_hammertoss_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_99e0abf0ff77c48653ef7ed17c6c846f_amadey_elex_glassworm_hammertoss_icedid_luca-stealer_njrat
- Size 7.3MB
- SHA256 bda499571862d40959b18c8055bb00324b8f2701d81c3f133eba0362d0ca78c6
- MD5 99e0abf0ff77c48653ef7ed17c6c846f
- SHA1 23cb35a873ce02c53baddb500fdad6c40facebc4
- SHA512 17a36a9d5034e7db321e7de346d40e28f31a10fbe2d75477ed9ee5acb2b231df19d71dd561a5381bda9c5a9c8cacdcc408bee621ec50344fc7d9dd91374f43f4
- SSDEEP 98304:aZ7QkPeU/LGz6I5P6yjwjPgHeKSQIYKViWgEALlBg3tSF:aZ0kGtZjwcH4QlKVKEABBg3i
- TLSH T11676AE06F7E11081F5BAC67584AB3129FD3A74E11324DAC762C25A9E0F21BF4BC3A756
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables manipulated with Fody
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE