General
- Target 2026-07-11_2c4f13d5d7eac71eba1405d59f46e43a_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 58.4MB
- Sample260711-ym7cjscs8s
- SHA256 47c4b438799bcf7fb7d02a1d82fcdd47215ff7778f1a8d1775dfa1c93598ea22
- MD5 2c4f13d5d7eac71eba1405d59f46e43a
- SHA1 f69f92c26e93a5ad2bb64e506c1aae04eabcc1a3
- SHA512 996b6266c0827cfa37ad6c50fd157482ca8de9e77c022821d279e1d50ad0357eeb570a03427214287e8565636d267f2c7beec86e41c74593d72fce84ea47b7d8
- SSDEEP 1572864:YrSfcIjKg6YycjHk0lTc94/q4vXKykSFOO5I+2xA3FK:Y2fyYycjHhlYAPhxq+2G1K
- TLSH T123D73306DAE04DB2D98369BCC864989BC7337D5E832127EF0925A69D6FF3301A871753
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_2c4f13d5d7eac71eba1405d59f46e43a_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_2c4f13d5d7eac71eba1405d59f46e43a_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 58.4MB
- SHA256 47c4b438799bcf7fb7d02a1d82fcdd47215ff7778f1a8d1775dfa1c93598ea22
- MD5 2c4f13d5d7eac71eba1405d59f46e43a
- SHA1 f69f92c26e93a5ad2bb64e506c1aae04eabcc1a3
- SHA512 996b6266c0827cfa37ad6c50fd157482ca8de9e77c022821d279e1d50ad0357eeb570a03427214287e8565636d267f2c7beec86e41c74593d72fce84ea47b7d8
- SSDEEP 1572864:YrSfcIjKg6YycjHk0lTc94/q4vXKykSFOO5I+2xA3FK:Y2fyYycjHhlYAPhxq+2G1K
- TLSH T123D73306DAE04DB2D98369BCC864989BC7337D5E832127EF0925A69D6FF3301A871753
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL