General
- Target 2026-06-30_f1275a25ae3f83f91099e280a52da8be_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 874KB
- Sample260701-ckrcnaet4s
- SHA256 4d7800a3be568df4c44d375e24434b000e724f689af92ccfedadf9986138b601
- MD5 f1275a25ae3f83f91099e280a52da8be
- SHA1 8b0b5193d5a5ce5b6933275800c6e8d598276a52
- SHA512 2fa00340818764532faed2dd604d52a8ac0432a09d2d51700efe246c76012c8a6c2f121cb2b93bf642c3250825bb2aad244212b695cdbb30dcdc369a4fc836a1
- SSDEEP 24576:625kkKdcLt08/95V/ddlouEfaxidjjWj6:D6xcx0yl+bJWe
- TLSH T13E158D29D2E88BBAF0E2D1768D62AD41D6B57C0D0360F18B13947B669EF31704D3B726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_f1275a25ae3f83f91099e280a52da8be_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_f1275a25ae3f83f91099e280a52da8be_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_f1275a25ae3f83f91099e280a52da8be_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 874KB
- SHA256 4d7800a3be568df4c44d375e24434b000e724f689af92ccfedadf9986138b601
- MD5 f1275a25ae3f83f91099e280a52da8be
- SHA1 8b0b5193d5a5ce5b6933275800c6e8d598276a52
- SHA512 2fa00340818764532faed2dd604d52a8ac0432a09d2d51700efe246c76012c8a6c2f121cb2b93bf642c3250825bb2aad244212b695cdbb30dcdc369a4fc836a1
- SSDEEP 24576:625kkKdcLt08/95V/ddlouEfaxidjjWj6:D6xcx0yl+bJWe
- TLSH T13E158D29D2E88BBAF0E2D1768D62AD41D6B57C0D0360F18B13947B669EF31704D3B726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE