General
- Target 2026-08-20_becef1d256444044c23e31a92bf5f353_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 12.2MB
- Sample260820-r2ms5adr7y
- SHA256 558f8c167b9532b4530833f9633cb0a8886fcac448a20152040b777150f2959b
- MD5 becef1d256444044c23e31a92bf5f353
- SHA1 03a304075f11d1cee93ee547fe53fb62353860c1
- SHA512 6f8875737c7b8d79f3187be6de445c3803461531c0ba78e683d5f8a96271daaf7ca9d7dad789b2278724e9d953ab32b1e1a6eaadb3a7a99265b5f03deac46b45
- SSDEEP 393216:p2xiFxbwpa3CW2xiFxbwpaD2xiFxbwpau2xiFxbwpat:4UFxMpKCpUFxMpxUFxMpIUFxMpe
- TLSH T18FD61211B3D6A5B6D0BF0639D87982A55675BC058B62C6EF53D4B92C2D32BC08E32373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_becef1d256444044c23e31a92bf5f353_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_becef1d256444044c23e31a92bf5f353_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_becef1d256444044c23e31a92bf5f353_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 12.2MB
- SHA256 558f8c167b9532b4530833f9633cb0a8886fcac448a20152040b777150f2959b
- MD5 becef1d256444044c23e31a92bf5f353
- SHA1 03a304075f11d1cee93ee547fe53fb62353860c1
- SHA512 6f8875737c7b8d79f3187be6de445c3803461531c0ba78e683d5f8a96271daaf7ca9d7dad789b2278724e9d953ab32b1e1a6eaadb3a7a99265b5f03deac46b45
- SSDEEP 393216:p2xiFxbwpa3CW2xiFxbwpaD2xiFxbwpau2xiFxbwpat:4UFxMpKCpUFxMpxUFxMpIUFxMpe
- TLSH T18FD61211B3D6A5B6D0BF0639D87982A55675BC058B62C6EF53D4B92C2D32BC08E32373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.