General
- Target 2026-07-07_a86f82e7b86de8c1d2199f2ed8badf69_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 25.0MB
- Sample260707-p73qesft8l
- SHA256 6a9d2f60a3115dcd5bc10b44b15161d3f91c3eed49e6f97a147535c0ab3f7576
- MD5 a86f82e7b86de8c1d2199f2ed8badf69
- SHA1 47eade43d64abb392af44fedb63afecd49221a34
- SHA512 f3a14dba0c83be53c6cbe2251346c767c63c5f2360164db7051f099791f7ea89cd0369aa5072e3d6b6231838728d4f92a653795317f7c24801d2595ff43b1a5c
- SSDEEP 786432:1Y0u4vvPgSup0e+pQI0Dry2nD3ekFFTVozAp/Tp:1Y0rftiI0Dry2n7ekFFJ1z
- TLSH T1C64733AD976849BAF02229FDDB4E0A17D76578469BD1EA8F03C054D58F3A5D0CCBE302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_a86f82e7b86de8c1d2199f2ed8badf69_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_a86f82e7b86de8c1d2199f2ed8badf69_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_a86f82e7b86de8c1d2199f2ed8badf69_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 25.0MB
- SHA256 6a9d2f60a3115dcd5bc10b44b15161d3f91c3eed49e6f97a147535c0ab3f7576
- MD5 a86f82e7b86de8c1d2199f2ed8badf69
- SHA1 47eade43d64abb392af44fedb63afecd49221a34
- SHA512 f3a14dba0c83be53c6cbe2251346c767c63c5f2360164db7051f099791f7ea89cd0369aa5072e3d6b6231838728d4f92a653795317f7c24801d2595ff43b1a5c
- SSDEEP 786432:1Y0u4vvPgSup0e+pQI0Dry2nD3ekFFTVozAp/Tp:1Y0rftiI0Dry2n7ekFFJ1z
- TLSH T1C64733AD976849BAF02229FDDB4E0A17D76578469BD1EA8F03C054D58F3A5D0CCBE302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE