General
- Target 2026-08-08_4472ededa0c8e8e4786894f6da925ccb_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 11.1MB
- Sample260808-d9gp7abe73
- SHA256 f5fa427a79366479aba016ea07b79584f29addfd55e307e98f5f9d3c06941ccf
Score
10/10
Malware Config
Targets
-
- Target 2026-08-08_4472ededa0c8e8e4786894f6da925ccb_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 11.1MB
- SHA256 f5fa427a79366479aba016ea07b79584f29addfd55e307e98f5f9d3c06941ccf
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.