General
- Target 2026-08-13_930cea8e706dd0598a6fd7b19a03b240_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 14.3MB
- Sample260813-ptv4eszdmc
- SHA256 7526f8f7a0b22a9caeebf4fd653145559eaeefe3787fd1d9c27e32cfd1ad6ea8
- MD5 930cea8e706dd0598a6fd7b19a03b240
- SHA1 10dfa975b6cc7c120af319d0a18514d2ac4f3ea8
- SHA512 b6c1faedf5e505c914239eb07673ddac17071c1d132fbbbbec248832281438f4941458f06e9551be99f8361156cc94508ae4e6f9e4db04677e110e62169c800d
- SSDEEP 393216:nq5VDBCDx6QERq5VDBCDxmq5VDBCDxnq5VDBCDxeq5VDBCDxy:np7ERpYpZpwp0
- TLSH T1F4E61212B3D69475D0BF0638D83A53656B35BC008B65C6AF6394B8692D33BC08E727B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_930cea8e706dd0598a6fd7b19a03b240_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_930cea8e706dd0598a6fd7b19a03b240_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260710-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_930cea8e706dd0598a6fd7b19a03b240_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 14.3MB
- SHA256 7526f8f7a0b22a9caeebf4fd653145559eaeefe3787fd1d9c27e32cfd1ad6ea8
- MD5 930cea8e706dd0598a6fd7b19a03b240
- SHA1 10dfa975b6cc7c120af319d0a18514d2ac4f3ea8
- SHA512 b6c1faedf5e505c914239eb07673ddac17071c1d132fbbbbec248832281438f4941458f06e9551be99f8361156cc94508ae4e6f9e4db04677e110e62169c800d
- SSDEEP 393216:nq5VDBCDx6QERq5VDBCDxmq5VDBCDxnq5VDBCDxeq5VDBCDxy:np7ERpYpZpwp0
- TLSH T1F4E61212B3D69475D0BF0638D83A53656B35BC008B65C6AF6394B8692D33BC08E727B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.