General
- Target 2026-08-28_e66dcaa7eb866171e0f375cd8595f2ac_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 16.3MB
- Sample260828-hq4ststwhy
- SHA256 61d204e8159bced23bf4135d5c9b285b401c61e13ca88b35c964aaa8ad7db1dd
- MD5 e66dcaa7eb866171e0f375cd8595f2ac
- SHA1 79aed037a43e7e9e8d766b787ce333d00bfa7393
- SHA512 fc657739b5ebb43cbdb3a0f89693c47604fdc703a8dca5327442415b57d8174f9d6bd106395171d80c458cfaea8075ca3ecec14cb18436aadd4ceb6700a719ed
- SSDEEP 393216:+CXvI5MvHxwJxCXvI5MvHxOCXvI5MvHxdCXvI5MvHxmCXvI5MvHxdCXvI5MvHxJ:+Z6Hx0Z6HxOZ6HxdZ6HxmZ6HxdZ6HxJ
- TLSH T1B4072211B3E585B6D0BF1678E8BD42654632FC144B26C2AF53A4796E2C32BC08E72777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_e66dcaa7eb866171e0f375cd8595f2ac_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_e66dcaa7eb866171e0f375cd8595f2ac_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_e66dcaa7eb866171e0f375cd8595f2ac_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 16.3MB
- SHA256 61d204e8159bced23bf4135d5c9b285b401c61e13ca88b35c964aaa8ad7db1dd
- MD5 e66dcaa7eb866171e0f375cd8595f2ac
- SHA1 79aed037a43e7e9e8d766b787ce333d00bfa7393
- SHA512 fc657739b5ebb43cbdb3a0f89693c47604fdc703a8dca5327442415b57d8174f9d6bd106395171d80c458cfaea8075ca3ecec14cb18436aadd4ceb6700a719ed
- SSDEEP 393216:+CXvI5MvHxwJxCXvI5MvHxOCXvI5MvHxdCXvI5MvHxmCXvI5MvHxdCXvI5MvHxJ:+Z6Hx0Z6HxOZ6HxdZ6HxmZ6HxdZ6HxJ
- TLSH T1B4072211B3E585B6D0BF1678E8BD42654632FC144B26C2AF53A4796E2C32BC08E72777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.