General
- Target 2026-07-03_7ab86bbf92563a553dfdfd20be6f446c_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 10.1MB
- Sample260703-ddqcfsfv4n
- SHA256 8e5752501a6eeeca4387f88098578dbb4122b4d65bed0124b7b25eda7d75e5da
- MD5 7ab86bbf92563a553dfdfd20be6f446c
- SHA1 52c47ce1607975af3383ba0151018690d1c2aaee
- SHA512 2dee7e88cef99c082bbcb24537a033a6e4f0358be51abd2e4bf4f25ca22d7ee391f05f93a65efb539db07dd675f7e322d92128256a7be64157d0817a2339a3c7
- SSDEEP 196608:jpKPUBkWBA5/wG+u16vm7sys/EpG4kvEVxmdzxkDGIThXqxFiA7j0Trk0lJqLfVJ:9KP+S51+Ju7v1pwvG+qDrTZMYA7arlJg
- TLSH T18AB63326DFE011B4E07BD4BACD628A12EBB27C8943709ACF13E516971F676D05B69303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_7ab86bbf92563a553dfdfd20be6f446c_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_7ab86bbf92563a553dfdfd20be6f446c_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_7ab86bbf92563a553dfdfd20be6f446c_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 10.1MB
- SHA256 8e5752501a6eeeca4387f88098578dbb4122b4d65bed0124b7b25eda7d75e5da
- MD5 7ab86bbf92563a553dfdfd20be6f446c
- SHA1 52c47ce1607975af3383ba0151018690d1c2aaee
- SHA512 2dee7e88cef99c082bbcb24537a033a6e4f0358be51abd2e4bf4f25ca22d7ee391f05f93a65efb539db07dd675f7e322d92128256a7be64157d0817a2339a3c7
- SSDEEP 196608:jpKPUBkWBA5/wG+u16vm7sys/EpG4kvEVxmdzxkDGIThXqxFiA7j0Trk0lJqLfVJ:9KP+S51+Ju7v1pwvG+qDrTZMYA7arlJg
- TLSH T18AB63326DFE011B4E07BD4BACD628A12EBB27C8943709ACF13E516971F676D05B69303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE