General
- Target 2026-06-27_d17b30be7bb587babf16c00d4d0491ab_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.7MB
- Sample260629-c5cd8sbv6s
- SHA256 5ca162765131f939080485be55c6c09f9320d960774d30aa4ae4e2c3c11c12d2
- MD5 d17b30be7bb587babf16c00d4d0491ab
- SHA1 a928a3ae3f00ef29a161d9bcc88038e61c9f4586
- SHA512 71d72662b66dc4b357a3e4d5b29c0b1231c23a39c3f1331b151a64fdbd64779e7d2e34d71b3ae3f37f3a768b61b629fb4bb4b779e2c134839ddcd755fc636df2
- SSDEEP 49152:3zksfrJMv7WyI3kkv6h1oD8eiMv3SmGlO3m17PnKtbtgbsfUeT+uXEkjNEEBHLu7:IUyhvdY8a+uUkjDBHLuz+k
- TLSH T13A06AE0AA3E806BCE0F7D679DE96C553D776780D07B0A69F029098A64F772608F39713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_d17b30be7bb587babf16c00d4d0491ab_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_d17b30be7bb587babf16c00d4d0491ab_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.7MB
- SHA256 5ca162765131f939080485be55c6c09f9320d960774d30aa4ae4e2c3c11c12d2
- MD5 d17b30be7bb587babf16c00d4d0491ab
- SHA1 a928a3ae3f00ef29a161d9bcc88038e61c9f4586
- SHA512 71d72662b66dc4b357a3e4d5b29c0b1231c23a39c3f1331b151a64fdbd64779e7d2e34d71b3ae3f37f3a768b61b629fb4bb4b779e2c134839ddcd755fc636df2
- SSDEEP 49152:3zksfrJMv7WyI3kkv6h1oD8eiMv3SmGlO3m17PnKtbtgbsfUeT+uXEkjNEEBHLu7:IUyhvdY8a+uUkjDBHLuz+k
- TLSH T13A06AE0AA3E806BCE0F7D679DE96C553D776780D07B0A69F029098A64F772608F39713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory