General
- Target 2026-07-04_38c9a611332018ae0600e06bf5242d10_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.8MB
- Sample260704-2wp2eaax2r
- SHA256 bf8f206f49768119ff75451cce0b9a45fed5f2c641f9238c13ebdfbb216a2bfc
- MD5 38c9a611332018ae0600e06bf5242d10
- SHA1 019b56a1437c59fb75da7950b6c8d4889a3a1b96
- SHA512 35931d20b64e6052785f0ebfc797a6f497bf99b0369f51c6bcf6da0b6695495c66e5331fd426137e54bd3142b486d82b44a5455bc707ec1509e3fe6d09858c03
- SSDEEP 49152:8zksfrJMv7WyI3kkv6h1oD8eiMv3SmGlO3m17PnKtbt/bs/UeT+uXEkjNEEBHLYo:JUyhvdvca+uUkjDBHLY+7wRGpj3
- TLSH T17806AE0AA7E406BCE0F7C679DEC6C553D776B80D07B0669F029098A64F772608F29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_38c9a611332018ae0600e06bf5242d10_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_38c9a611332018ae0600e06bf5242d10_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.8MB
- SHA256 bf8f206f49768119ff75451cce0b9a45fed5f2c641f9238c13ebdfbb216a2bfc
- MD5 38c9a611332018ae0600e06bf5242d10
- SHA1 019b56a1437c59fb75da7950b6c8d4889a3a1b96
- SHA512 35931d20b64e6052785f0ebfc797a6f497bf99b0369f51c6bcf6da0b6695495c66e5331fd426137e54bd3142b486d82b44a5455bc707ec1509e3fe6d09858c03
- SSDEEP 49152:8zksfrJMv7WyI3kkv6h1oD8eiMv3SmGlO3m17PnKtbt/bs/UeT+uXEkjNEEBHLYo:JUyhvdvca+uUkjDBHLY+7wRGpj3
- TLSH T17806AE0AA7E406BCE0F7C679DEC6C553D776B80D07B0669F029098A64F772608F29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1