General
- Target 2026-06-01_68a00cf93d550cc5c0f0c9348a65313e_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 11.0MB
- Sample260601-bk2b7aay61
- SHA256 041159e598815fd0073e63bb30baa9a7242d3e74eb005e8c6b0e7fa6a8ecf91d
- MD5 68a00cf93d550cc5c0f0c9348a65313e
- SHA1 d8da4089725a9cf8ecd1102c36e3d61eace2c51f
- SHA512 6fcd34c7d2294b06479eeefaafa55382f87468277832204c34c505e4d851c24f2e4d7788bea32b7144dd5ac1b76833507b83419d4ba466540006a083c37b4de7
- SSDEEP 196608:9Oas3RqHrJpGoZrYobLn/9B5Dw9TFxg7e7CNzJZbxa5Uey7TkStaOoJAfIcSBhio:9OamA3Rko/n/n5E9TI733bTaOoJAfJ2V
- TLSH T147C63368C6B541FDD1B2A534CD968B0AE272744503B5E6CF03A49D6B1E3F2B48D39F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_68a00cf93d550cc5c0f0c9348a65313e_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_68a00cf93d550cc5c0f0c9348a65313e_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_68a00cf93d550cc5c0f0c9348a65313e_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 11.0MB
- SHA256 041159e598815fd0073e63bb30baa9a7242d3e74eb005e8c6b0e7fa6a8ecf91d
- MD5 68a00cf93d550cc5c0f0c9348a65313e
- SHA1 d8da4089725a9cf8ecd1102c36e3d61eace2c51f
- SHA512 6fcd34c7d2294b06479eeefaafa55382f87468277832204c34c505e4d851c24f2e4d7788bea32b7144dd5ac1b76833507b83419d4ba466540006a083c37b4de7
- SSDEEP 196608:9Oas3RqHrJpGoZrYobLn/9B5Dw9TFxg7e7CNzJZbxa5Uey7TkStaOoJAfIcSBhio:9OamA3Rko/n/n5E9TI733bTaOoJAfJ2V
- TLSH T147C63368C6B541FDD1B2A534CD968B0AE272744503B5E6CF03A49D6B1E3F2B48D39F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE