General
- Target 2026-05-24_0baf6af110d3ad7bebe2eaac641613b7_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 2.9MB
- Sample260524-qjdl3adt2m
- SHA256 0e73f70fa00b2ca40461d4f5a10704db0fdd0f416d84ab108086dcd8603a492a
- MD5 0baf6af110d3ad7bebe2eaac641613b7
- SHA1 bd64e23289e1c424a567e27783296da4928e0352
- SHA512 cb1588768511d3e0d7f00bf64d2af60920f89b5a3b5577db6a16ab103160d6d01d89f68aa7e2757aba4e59d47eae8b518bc4c4c1eb8d1c663d191d768b93dad5
- SSDEEP 49152:L2hvRhHukNaYqr2lr1skQkcyp3txIELl2hOAMFktnllgu50f0Bpywix:MvOiy29wkcynSU2h1MGZllHlyjx
- TLSH T1B0E52209E7E801FDD0B3E274CD824816EB76B84A57B0E7CF03A46A961F235549E3DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-24_0baf6af110d3ad7bebe2eaac641613b7_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-24_0baf6af110d3ad7bebe2eaac641613b7_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-24_0baf6af110d3ad7bebe2eaac641613b7_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 2.9MB
- SHA256 0e73f70fa00b2ca40461d4f5a10704db0fdd0f416d84ab108086dcd8603a492a
- MD5 0baf6af110d3ad7bebe2eaac641613b7
- SHA1 bd64e23289e1c424a567e27783296da4928e0352
- SHA512 cb1588768511d3e0d7f00bf64d2af60920f89b5a3b5577db6a16ab103160d6d01d89f68aa7e2757aba4e59d47eae8b518bc4c4c1eb8d1c663d191d768b93dad5
- SSDEEP 49152:L2hvRhHukNaYqr2lr1skQkcyp3txIELl2hOAMFktnllgu50f0Bpywix:MvOiy29wkcynSU2h1MGZllHlyjx
- TLSH T1B0E52209E7E801FDD0B3E274CD824816EB76B84A57B0E7CF03A46A961F235549E3DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE