General
- Target 2026-07-05_92c54f7ecad1a7120d95c8a3e0831465_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 9.2MB
- Sample260705-flnvpsdt5n
- SHA256 75bbb17d4cc4b8292f26ff1e105eb714a52c310b68431cb60809c45c4a914cf3
- MD5 92c54f7ecad1a7120d95c8a3e0831465
- SHA1 0375d8580ad5757b731486a9ed94ff5582fb3fc6
- SHA512 b5804afd4e84c80481ab2bde570ef712ed8cbe7a6fae1dc871876700ed4e3756185ac409a6e78dcf27b31b93198d385221c15439b31b17094b87b2c009ea68e2
- SSDEEP 196608:rspW2BExdP2y1r5N4LcRgWprldtxKViARYItE6dDjVYgDstC:sMdP7pqWVWVZUaDjVWM
- TLSH T1CFA63309D7F416FDD0A6A2B4CADB4902EB763C899791ABCF0360AA561F132E0DD3D741
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_92c54f7ecad1a7120d95c8a3e0831465_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_92c54f7ecad1a7120d95c8a3e0831465_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_92c54f7ecad1a7120d95c8a3e0831465_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 9.2MB
- SHA256 75bbb17d4cc4b8292f26ff1e105eb714a52c310b68431cb60809c45c4a914cf3
- MD5 92c54f7ecad1a7120d95c8a3e0831465
- SHA1 0375d8580ad5757b731486a9ed94ff5582fb3fc6
- SHA512 b5804afd4e84c80481ab2bde570ef712ed8cbe7a6fae1dc871876700ed4e3756185ac409a6e78dcf27b31b93198d385221c15439b31b17094b87b2c009ea68e2
- SSDEEP 196608:rspW2BExdP2y1r5N4LcRgWprldtxKViARYItE6dDjVYgDstC:sMdP7pqWVWVZUaDjVWM
- TLSH T1CFA63309D7F416FDD0A6A2B4CADB4902EB763C899791ABCF0360AA561F132E0DD3D741
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.