Overview

overview

7

Static

static

3

2026-06-26...lc.exe

windows10-2004-x64

7

2026-06-26...lc.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    144s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260618-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/06/2026, 13:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-26_9bc437013d81650eada3382b6d7cec2b_cryptbot_icedid_luca-stealer_njrat_stealc.exe
  • Size 5.7MB
  • Sample260629-qztm8aex5x
  • SHA256 3dfb8366ad3d6b6ebdae40bad4133651a276df509326af219a2f7c8afcca6567
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-26_9bc437013d81650eada3382b6d7cec2b_cryptbot_icedid_luca-stealer_njrat_stealc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-26_9bc437013d81650eada3382b6d7cec2b_cryptbot_icedid_luca-stealer_njrat_stealc.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:7064
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\(run before opening ac).bat" "
      2⤵
        PID:252

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          (run before opening ac).bat
          • Path C:\Users\Admin\AppData\Local\Temp\(run before opening ac).bat
          • Size 2KB
          • SHA256 a2e67fd2f710528e6b6580585407e24c80eee81d4274173efdf3813d787a6992
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          LICENSE
          • Path C:\Users\Admin\AppData\Local\Temp\node_modules\@tsconfig\node14\LICENSE
          • Size 1KB
          • SHA256 646f8936b8ddcd14e13e578ff6857e368780b0d1a4f6066bee89211923a373e2
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          bin-script-deprecated.d.ts
          • Path C:\Users\Admin\AppData\Local\Temp\node_modules\ts-node\dist\bin-script-deprecated.d.ts
          • Size 31B
          • SHA256 43e818adf60173644896298637f47b01d5819b17eda46eaa32d0c7d64724d012
          • MD5 SHA1 SHA512
          Submit Download

          child-loader.d.ts
          • Path C:\Users\Admin\AppData\Local\Temp\node_modules\ts-node\dist\child\child-loader.d.ts
          • Size 11B
          • SHA256 8e609bb71c20b858c77f0e9f90bb1319db8477b13f9f965f1a1e18524bf50881
          • MD5 SHA1 SHA512
          Submit Download

          lib.webworker.asynciterable.d.ts
          • Path C:\Users\Admin\AppData\Local\Temp\node_modules\typescript\lib\lib.webworker.asynciterable.d.ts
          • Size 933B
          • SHA256 7f57fc4404ff020bc45b9c620aff2b40f700b95fe31164024c453a5e3c163c54
          • MD5 SHA1 SHA512 TLSH
          Submit Download