General
- Target 2026-07-11_6b014aa2941dc679d45a382888521c23_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 638KB
- Sample260711-e5rj9sbw8m
- SHA256 b9e3feb17c08e99bf1682d63dbf6cd3a5e1b2d92cfe980522639d167bcef0277
- MD5 6b014aa2941dc679d45a382888521c23
- SHA1 608433f26cce3f70cb3074d1c1e532640b4997b6
- SHA512 59d0e4e6b96098b50e44ad5ff605bc00efae730428ce98bc8304cf70223947a32f93d88f56a94430dba52266f41efb2cd46d825c4ef862a22811ac7e6250cb6b
- SSDEEP 12288:khoVY2+LfWvRSECKG4iRkT7bCpAMyX0G3W0FV:kb2+CvRSEHiRkT7bCp3yXf3Wk
- TLSH T1AFD48D59D7A484BED3A3D57C8D42C932E776780A0FE1A68F03E455F51F232A0B929F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_6b014aa2941dc679d45a382888521c23_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_6b014aa2941dc679d45a382888521c23_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_6b014aa2941dc679d45a382888521c23_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 638KB
- SHA256 b9e3feb17c08e99bf1682d63dbf6cd3a5e1b2d92cfe980522639d167bcef0277
- MD5 6b014aa2941dc679d45a382888521c23
- SHA1 608433f26cce3f70cb3074d1c1e532640b4997b6
- SHA512 59d0e4e6b96098b50e44ad5ff605bc00efae730428ce98bc8304cf70223947a32f93d88f56a94430dba52266f41efb2cd46d825c4ef862a22811ac7e6250cb6b
- SSDEEP 12288:khoVY2+LfWvRSECKG4iRkT7bCpAMyX0G3W0FV:kb2+CvRSEHiRkT7bCp3yXf3Wk
- TLSH T1AFD48D59D7A484BED3A3D57C8D42C932E776780A0FE1A68F03E455F51F232A0B929F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE