General
- Target 2026-08-23_be2e19546a96cc50e2a22172f0533028_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 23.0MB
- Sample260823-2s6vrawtez
- SHA256 5b11085e4327770a1e2504d010b38dc7bbdf81b806c2f1d98ee82223d6d95788
- MD5 be2e19546a96cc50e2a22172f0533028
- SHA1 e6145c59c956283b21e38cdf22e44b1478cfe4cb
- SHA512 e4c6016f861e2d5d42ad476859e89f86039fcf83914fdbc5e8131b1aaa570129c49cdafd28d936aa7ae20bc868b08bfda3e6dcd1c62dbcdd0534dfd090348e9d
- SSDEEP 393216:DhjOvTi7hha6243c11tOvTi7hha62fOvTi7hha62ZOvTi7hha62ZOvTi7hha62l:DhjOvj43O1tOvjfOvjZOvjZOvjl
- TLSH T1E93723007BC6AAA7D53F06359876232067B4BC414F13C36F66A4BA3D5D327C06E727A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_be2e19546a96cc50e2a22172f0533028_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_be2e19546a96cc50e2a22172f0533028_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_be2e19546a96cc50e2a22172f0533028_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 23.0MB
- SHA256 5b11085e4327770a1e2504d010b38dc7bbdf81b806c2f1d98ee82223d6d95788
- MD5 be2e19546a96cc50e2a22172f0533028
- SHA1 e6145c59c956283b21e38cdf22e44b1478cfe4cb
- SHA512 e4c6016f861e2d5d42ad476859e89f86039fcf83914fdbc5e8131b1aaa570129c49cdafd28d936aa7ae20bc868b08bfda3e6dcd1c62dbcdd0534dfd090348e9d
- SSDEEP 393216:DhjOvTi7hha6243c11tOvTi7hha62fOvTi7hha62ZOvTi7hha62ZOvTi7hha62l:DhjOvj43O1tOvjfOvjZOvjZOvjl
- TLSH T1E93723007BC6AAA7D53F06359876232067B4BC414F13C36F66A4BA3D5D327C06E727A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.