General
- Target 2026-04-17_89faa5902802be6a557fabbf9db16eb4_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 23.2MB
- Sample260417-ff644afw5k
- SHA256 d77a3b3fc34bf31f5122af9b6faae7e3a2b5f2b71b9ea3968ebba4110f15fdcb
- MD5 89faa5902802be6a557fabbf9db16eb4
- SHA1 f9ed421b534d3060d9201a0f6b733458d837d15b
- SHA512 d1f2b8f0ffd8216fe5374c661a3480ede6c2ebcf4ba30ecacb68d86171e0fd88a228672211f13276ebcff61da08f0d1faa6326dacdfbcdc97f2f7b02428a7318
- SSDEEP 196608:1e413jMfHJ1OItloMoUuaMSXthqfxcM0JMBsw9DvMENmAPPOV0HQYTnQnwL0:M4dWHOItqDUb59cfmMZ9DEcPOV0HQG1
- TLSH T1FD37338DD7FA04F9F0B7B178DD85C612E737B8490375E6AB93A429210F632909E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_89faa5902802be6a557fabbf9db16eb4_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_89faa5902802be6a557fabbf9db16eb4_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 23.2MB
- SHA256 d77a3b3fc34bf31f5122af9b6faae7e3a2b5f2b71b9ea3968ebba4110f15fdcb
- MD5 89faa5902802be6a557fabbf9db16eb4
- SHA1 f9ed421b534d3060d9201a0f6b733458d837d15b
- SHA512 d1f2b8f0ffd8216fe5374c661a3480ede6c2ebcf4ba30ecacb68d86171e0fd88a228672211f13276ebcff61da08f0d1faa6326dacdfbcdc97f2f7b02428a7318
- SSDEEP 196608:1e413jMfHJ1OItloMoUuaMSXthqfxcM0JMBsw9DvMENmAPPOV0HQYTnQnwL0:M4dWHOItqDUb59cfmMZ9DEcPOV0HQG1
- TLSH T1FD37338DD7FA04F9F0B7B178DD85C612E737B8490375E6AB93A429210F632909E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE