General
- Target 2026-08-17_12c8f9eacfbd1d63637d964364faac56_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 12.2MB
- Sample260817-2rlhes1zct
- SHA256 e9dd3ded2567a0ffb94153c6c2e2f89e3f67bc1bbe2bad3c07c5ef9d00d87a5d
- MD5 12c8f9eacfbd1d63637d964364faac56
- SHA1 851ee02944685037a6e8771de5dac8e426a911ff
- SHA512 beafc9f5fca35c92d8784294e5fdad14d2a2384611119031216e29bd874f828f1303a68450c660596a473c5097b78156dbf60438d5701f73719bdf571f1a510e
- SSDEEP 196608:TcbxfefPQek1luGLrrcek1luGWek1luGGek1luGL:obM7GLh7Gr7Gb7GL
- TLSH T1C5D61211B3D691BAD0BF0A38E43A52655635BC055766C6BF2390B96E2C32FC09E36373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_12c8f9eacfbd1d63637d964364faac56_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_12c8f9eacfbd1d63637d964364faac56_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_12c8f9eacfbd1d63637d964364faac56_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 12.2MB
- SHA256 e9dd3ded2567a0ffb94153c6c2e2f89e3f67bc1bbe2bad3c07c5ef9d00d87a5d
- MD5 12c8f9eacfbd1d63637d964364faac56
- SHA1 851ee02944685037a6e8771de5dac8e426a911ff
- SHA512 beafc9f5fca35c92d8784294e5fdad14d2a2384611119031216e29bd874f828f1303a68450c660596a473c5097b78156dbf60438d5701f73719bdf571f1a510e
- SSDEEP 196608:TcbxfefPQek1luGLrrcek1luGWek1luGGek1luGL:obM7GLh7Gr7Gb7GL
- TLSH T1C5D61211B3D691BAD0BF0A38E43A52655635BC055766C6BF2390B96E2C32FC09E36373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.