General
- Target 2026-06-04_997ac61e264448f62f6908373991ab5a_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.8MB
- Sample260604-tjf9qsbs2k
- SHA256 1ab0de17f23875250104e3e172087e745f45f07fa747a172fd5a300600d80bb4
- MD5 997ac61e264448f62f6908373991ab5a
- SHA1 cfbf28d041b313a9e40c12a890660666dc8bc653
- SHA512 83793f9d59960dbda76434952bbd1e8922dd1cee4342e43d48348bba27c6a35967b26b0bfdab79cec74b9a02ff1fdc6a72b0f92e5d08225382e2ace2a77ac159
- SSDEEP 49152:O1g15A610nCjvLEt9sVZVGB9D2Of4HQOYnOKZUmvnMGAv+e/DI9yxUeT+uXEkjNf:ONUA0ZunZhmqa+uUkjDBHLpDz50GC
- TLSH T13306AE1AA3F806ACE0F7C279DE95C553D776B80D07B1A69F02909CA64F732608E79713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_997ac61e264448f62f6908373991ab5a_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_997ac61e264448f62f6908373991ab5a_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_997ac61e264448f62f6908373991ab5a_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.8MB
- SHA256 1ab0de17f23875250104e3e172087e745f45f07fa747a172fd5a300600d80bb4
- MD5 997ac61e264448f62f6908373991ab5a
- SHA1 cfbf28d041b313a9e40c12a890660666dc8bc653
- SHA512 83793f9d59960dbda76434952bbd1e8922dd1cee4342e43d48348bba27c6a35967b26b0bfdab79cec74b9a02ff1fdc6a72b0f92e5d08225382e2ace2a77ac159
- SSDEEP 49152:O1g15A610nCjvLEt9sVZVGB9D2Of4HQOYnOKZUmvnMGAv+e/DI9yxUeT+uXEkjNf:ONUA0ZunZhmqa+uUkjDBHLpDz50GC
- TLSH T13306AE1AA3F806ACE0F7C279DE95C553D776B80D07B1A69F02909CA64F732608E79713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1