General
- Target 2026-08-08_835adc3f86c807e5d0fb43c1843636eb_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 11.1MB
- Sample260808-rsz24adh69
- SHA256 0e663e77479d9bc6bfe7faa3ce01fde7f57b7e3f736db2ca86eafad6ad01906a
Score
10/10
Malware Config
Targets
-
- Target 2026-08-08_835adc3f86c807e5d0fb43c1843636eb_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 11.1MB
- SHA256 0e663e77479d9bc6bfe7faa3ce01fde7f57b7e3f736db2ca86eafad6ad01906a
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.