General
- Target 2026-08-13_ba5068ac4653c95885e800ca35fe8bd6_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 19.6MB
- Sample260813-ealqjay1ds
- SHA256 2a036e2ea81f16abde4fe0e5bbd26f686c34b14955a74ee594e5775436416c23
- MD5 ba5068ac4653c95885e800ca35fe8bd6
- SHA1 27f7b98bfc2a665baf27f44e8217d7d1c77dc7d0
- SHA512 c6f8af25d6714788f019df29e055c5b2e00c69615245b841e8df9e6310c416a20cc7772dc18bd55145d128a57abfed76aa0bf1f30e7fc6c187d06a185d502528
- SSDEEP 393216:rh1OvTi7hha62+3/11VOvTi7hha62LOvTi7hha62UOvTi7hha62W:rh1Ovj+391VOvjLOvjUOvjW
- TLSH T1842723017BC6AAA7D43F0635987A632067B4BC414F13C36F66A47A3D1D327C06E727A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_ba5068ac4653c95885e800ca35fe8bd6_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_ba5068ac4653c95885e800ca35fe8bd6_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_ba5068ac4653c95885e800ca35fe8bd6_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 19.6MB
- SHA256 2a036e2ea81f16abde4fe0e5bbd26f686c34b14955a74ee594e5775436416c23
- MD5 ba5068ac4653c95885e800ca35fe8bd6
- SHA1 27f7b98bfc2a665baf27f44e8217d7d1c77dc7d0
- SHA512 c6f8af25d6714788f019df29e055c5b2e00c69615245b841e8df9e6310c416a20cc7772dc18bd55145d128a57abfed76aa0bf1f30e7fc6c187d06a185d502528
- SSDEEP 393216:rh1OvTi7hha62+3/11VOvTi7hha62LOvTi7hha62UOvTi7hha62W:rh1Ovj+391VOvjLOvjUOvjW
- TLSH T1842723017BC6AAA7D43F0635987A632067B4BC414F13C36F66A47A3D1D327C06E727A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.