General
- Target 2026-04-22_28c1188141b2ce051b82e4442e9fd315_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 977KB
- Sample260422-rap46scs2s
- SHA256 79d8c0b582275a655986af715f44a55d41ca78200d816a888c094948fc6c9a52
- MD5 28c1188141b2ce051b82e4442e9fd315
- SHA1 50612c24bcc08422b8ab77e813e8137b1fc5b0b2
- SHA512 64d645addea67a5898ee97e269b8ffee1c9f4b0086a151a002978ce0ebd8e91dd01c280297712f037282e7f4ab92716dc9fdf94ff3c7e695df4acaa7ba83d48b
- SSDEEP 12288:qRZeGAfqNGA3Uq29XIDixjpyq0BHpCOXaJ2/FCwKR6pGx:qRSfrAEH9XIYpj0BHpCOXaLR6Yx
- TLSH T1EA2516CBEE74A0E8E0A3E5B549524E42DE757C3446EF9D4ABE8474D41B731B00B36B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_28c1188141b2ce051b82e4442e9fd315_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_28c1188141b2ce051b82e4442e9fd315_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_28c1188141b2ce051b82e4442e9fd315_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 977KB
- SHA256 79d8c0b582275a655986af715f44a55d41ca78200d816a888c094948fc6c9a52
- MD5 28c1188141b2ce051b82e4442e9fd315
- SHA1 50612c24bcc08422b8ab77e813e8137b1fc5b0b2
- SHA512 64d645addea67a5898ee97e269b8ffee1c9f4b0086a151a002978ce0ebd8e91dd01c280297712f037282e7f4ab92716dc9fdf94ff3c7e695df4acaa7ba83d48b
- SSDEEP 12288:qRZeGAfqNGA3Uq29XIDixjpyq0BHpCOXaJ2/FCwKR6pGx:qRSfrAEH9XIYpj0BHpCOXaLR6Yx
- TLSH T1EA2516CBEE74A0E8E0A3E5B549524E42DE757C3446EF9D4ABE8474D41B731B00B36B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.