General
- Target 2026-08-24_aaa093857f3b93b219ef89f6576500cd_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 14.3MB
- Sample260825-feaphasybz
- SHA256 f386c67884860431ac3052790781842ba25a9e2176c23177144cacde1e2461db
- MD5 aaa093857f3b93b219ef89f6576500cd
- SHA1 8b0634055fdc5eda5b860f3b374f3537fa6d3d67
- SHA512 cfb50a9595b7d9952fd191afef3acf68a4bc8cf8cc8dde9754842ae9853b8bbf3af6f99629c67fb1b2c8a7142834d258cc9ae45687c852512edb26e58bf7206f
- SSDEEP 393216:O2xiFxbwpaBC/2xiFxbwpaB2xiFxbwpaV2xiFxbwpat2xiFxbwpa6:RUFxMp8C+UFxMpFUFxMp/UFxMpJUFxMT
- TLSH T133E61211B3D665B6E0BF0639E87982A55675BD058B22C6EF52D4B92C2D33BC08E31373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_aaa093857f3b93b219ef89f6576500cd_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_aaa093857f3b93b219ef89f6576500cd_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_aaa093857f3b93b219ef89f6576500cd_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 14.3MB
- SHA256 f386c67884860431ac3052790781842ba25a9e2176c23177144cacde1e2461db
- MD5 aaa093857f3b93b219ef89f6576500cd
- SHA1 8b0634055fdc5eda5b860f3b374f3537fa6d3d67
- SHA512 cfb50a9595b7d9952fd191afef3acf68a4bc8cf8cc8dde9754842ae9853b8bbf3af6f99629c67fb1b2c8a7142834d258cc9ae45687c852512edb26e58bf7206f
- SSDEEP 393216:O2xiFxbwpaBC/2xiFxbwpaB2xiFxbwpaV2xiFxbwpat2xiFxbwpa6:RUFxMp8C+UFxMpFUFxMp/UFxMpJUFxMT
- TLSH T133E61211B3D665B6E0BF0639E87982A55675BD058B22C6EF52D4B92C2D33BC08E31373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.