General
- Target 2026-05-08_6df165df31fcfb9f33b478861ff971e8_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 743KB
- Sample260508-2bkk7ae161
- SHA256 ba6d8d9914db320fb890be140292ad455d9ee0314f8df8f21405c0330601c899
- MD5 6df165df31fcfb9f33b478861ff971e8
- SHA1 feb23be8c348758e40a4d884a54db9e4d8b3be8a
- SHA512 46e22da89abe08da1d1122bcb5a1ccba0839da1dc6eec2925e0948fa4d0893a8917aa1e3d0966c844c85e13a77b958d5970c632ce5c9eb6ad5cb02d075872f5e
- SSDEEP 12288:cRZeGAfqNGA3Uq29XIDixjpyq0BAfUf3zCU2dD819t4x8ICrP:cRSfrAEH9XIYpj0BAfUuvQTv1P
- TLSH T185F4AE05F7A601B9D1B7D674C946C963E732F84D0B61E78F03E1B9A61E27A90CD3A702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-08_6df165df31fcfb9f33b478861ff971e8_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-08_6df165df31fcfb9f33b478861ff971e8_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-08_6df165df31fcfb9f33b478861ff971e8_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 743KB
- SHA256 ba6d8d9914db320fb890be140292ad455d9ee0314f8df8f21405c0330601c899
- MD5 6df165df31fcfb9f33b478861ff971e8
- SHA1 feb23be8c348758e40a4d884a54db9e4d8b3be8a
- SHA512 46e22da89abe08da1d1122bcb5a1ccba0839da1dc6eec2925e0948fa4d0893a8917aa1e3d0966c844c85e13a77b958d5970c632ce5c9eb6ad5cb02d075872f5e
- SSDEEP 12288:cRZeGAfqNGA3Uq29XIDixjpyq0BAfUf3zCU2dD819t4x8ICrP:cRSfrAEH9XIYpj0BAfUuvQTv1P
- TLSH T185F4AE05F7A601B9D1B7D674C946C963E732F84D0B61E78F03E1B9A61E27A90CD3A702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE