General
- Target 2026-09-23_be1c6e8cbb3ca96cc161f0281686e5de_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 12.2MB
- Sample260924-cbt27abf55
- SHA256 1bb5a26440c76eedf4b0a9db6a5b197f8f8ae781ac547677de2ad6784b9e34b1
- MD5 be1c6e8cbb3ca96cc161f0281686e5de
- SHA1 3872d2671f36f6a71bf62647b657b7131d8fabc7
- SHA512 e639f1d913c1c8c382d7ffc323d29663d568ccf8ebb5d44bbf0f175ffd60e55e93c920e708744ba3731cef66f44df5123b8283f4d83af5ba4767ee5d458baed0
- SSDEEP 98304:h3GF0s6efPGMn1Giy8E1PqhkG6ztZNK9aNG1Mn1Giy8E1PqhAMn1Giy8E1PqhzMM:lGufefPxZWi6z3I96JZWijZWiyZWig
- TLSH T10DD61211B3E691B5E0BF0638D87A62666631BC128751C7AF6794BE792D327C08E31373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-23_be1c6e8cbb3ca96cc161f0281686e5de_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-23_be1c6e8cbb3ca96cc161f0281686e5de_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_be1c6e8cbb3ca96cc161f0281686e5de_amadey_elex_glassworm_hellokitty_icedid_luca-stealer_njrat_ransomhub_remcos_smoke-loader_vidar
- Size 12.2MB
- SHA256 1bb5a26440c76eedf4b0a9db6a5b197f8f8ae781ac547677de2ad6784b9e34b1
- MD5 be1c6e8cbb3ca96cc161f0281686e5de
- SHA1 3872d2671f36f6a71bf62647b657b7131d8fabc7
- SHA512 e639f1d913c1c8c382d7ffc323d29663d568ccf8ebb5d44bbf0f175ffd60e55e93c920e708744ba3731cef66f44df5123b8283f4d83af5ba4767ee5d458baed0
- SSDEEP 98304:h3GF0s6efPGMn1Giy8E1PqhkG6ztZNK9aNG1Mn1Giy8E1PqhAMn1Giy8E1PqhzMM:lGufefPxZWi6z3I96JZWijZWiyZWig
- TLSH T10DD61211B3E691B5E0BF0638D87A62666631BC128751C7AF6794BE792D327C08E31373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.