General
- Target 2026-07-01_0fb860b7d5a79f7be108e5df602b3612_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 684KB
- Sample260701-yr2b4adz4l
- SHA256 f2a6cc621c30ec2fc86bc2ebbe79323cec155c4f051af0ac43a866189b40f6ae
- MD5 0fb860b7d5a79f7be108e5df602b3612
- SHA1 c49fb0c1564c59e1d5e49f8a469a7b424a9f5350
- SHA512 894e2b679a49b4a89818c228704bdd9f21f17f6dd24f53a96ff6b39ecc951c8cc9ba48ca8fe0db5ccb9cc5b32f2cd51ba695fe7bdd6e728fa7a1f7592ae8d946
- SSDEEP 12288:ihoVY2+LfWvRSECKG4iRkTyZ0NhfahzwYZmligppNnCQt0NhfahzwYZc:Wb2+CvRSEHiRkTyZ0NhfaUlR350NhfaC
- TLSH T105E4BF19D7E405FDE0B7D578CD834906EB767C4A4771EA8F03A4A9A61F232908E3DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_0fb860b7d5a79f7be108e5df602b3612_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_0fb860b7d5a79f7be108e5df602b3612_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260630-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_0fb860b7d5a79f7be108e5df602b3612_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 684KB
- SHA256 f2a6cc621c30ec2fc86bc2ebbe79323cec155c4f051af0ac43a866189b40f6ae
- MD5 0fb860b7d5a79f7be108e5df602b3612
- SHA1 c49fb0c1564c59e1d5e49f8a469a7b424a9f5350
- SHA512 894e2b679a49b4a89818c228704bdd9f21f17f6dd24f53a96ff6b39ecc951c8cc9ba48ca8fe0db5ccb9cc5b32f2cd51ba695fe7bdd6e728fa7a1f7592ae8d946
- SSDEEP 12288:ihoVY2+LfWvRSECKG4iRkTyZ0NhfahzwYZmligppNnCQt0NhfahzwYZc:Wb2+CvRSEHiRkTyZ0NhfaUlR350NhfaC
- TLSH T105E4BF19D7E405FDE0B7D578CD834906EB767C4A4771EA8F03A4A9A61F232908E3DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application