Analysis
- max time kernel
150s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/07/2026, 14:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_8e3f69a4f73cbc8b24d9f240c0f5a650_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_8e3f69a4f73cbc8b24d9f240c0f5a650_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-16_8e3f69a4f73cbc8b24d9f240c0f5a650_cryptbot_icedid_luca-stealer_njrat_stealc.exe
- Size 59.5MB
- Sample260716-rdcm9aaz2s
- SHA256 eccd5e5400ff9deb8efd660b05ec26f10670751b355ea8930e0673d0bf4ec492
- MD5 8e3f69a4f73cbc8b24d9f240c0f5a650
- SHA1 432acb1edf4c117e81592507ded27a151243204c
- SHA512 8bc25c7312ad00041c63781592616ff24cc0fa066f99e51c0bfcd16f57533de5746da2713a176f8edccf43bddfad2dc9e021dc8cca371ddf198cb047a6ef5436
- SSDEEP 786432:ETubPkjLkm4C3MW9lfjsSowyYewv6UcmU9lfjsSowyYewv6UcmR9lfjsSowyYewQ:ijLetyjEvQ6skjEvQ6sRjEvQ6sy
- TLSH T1B5D7336BDB5D65AEE885E0F90853F892EFB9BC2E9B0004DED75481461631140BB7FA3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4056 2026-07-16_8e3f69a4f73cbc8b24d9f240c0f5a650_cryptbot_icedid_luca-stealer_njrat_stealc.exe 4056 2026-07-16_8e3f69a4f73cbc8b24d9f240c0f5a650_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-16_8e3f69a4f73cbc8b24d9f240c0f5a650_cryptbot_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-16_8e3f69a4f73cbc8b24d9f240c0f5a650_cryptbot_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:4056
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\DentalCAD Chemnitz\PartialCADApp\liccore.dll
- Size 283KB
- SHA256 77601116e0eae4f076265e5c20f91f9aaa12a5f8995d62424856e877d8affd3a
- MD5 ffdca27fffe941af421966d7a0efb9df
- SHA1 1a96eb406b6b88e336d12e096a47f1a5f930b347
- SHA512 ae5c357b7e0d87e9fed35107646331f16fc654a1dc776127cf756b766204366bd64707f394271f876ea487bd05be9752e4bb3ee24cab396895ed8ec3712466ea
- SSDEEP 3072:3x6DnZMlSBPpQTEYcThCBMTrIuP86gSI43NQeIeqfsKXqnRGDOs3lQGdzlZlViqc:3x6zyqiaTrIuPHgYK1M0dhdg
- TLSH T1E6547D16F7A414B9E277857CCA534906EBF27C464771EADF03A00AA62F237E0963E711
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\DentalCAD Chemnitz\exoImplantEditor\patcher.dll
- Size 17.2MB
- SHA256 1d661644f42a73398d55dccaf969dde42d7e326b6d890985a2938c47a3127cdb
- MD5 9f25586c259e7bf060c72b8560e92ec1
- SHA1 2890716cd98122e9a59b1b226d4e7e1a1a35e770
- SHA512 2cb5c38a77d56f71a6e1caf1beaa1adadbbe7438b777c6c3fe8846a752763c998dadb9895e39e5e4d40f9edb37e3a24be8e0413eb0ba33b8af8998003abc9934
- SSDEEP 393216:5FnrjnOnPIvIBN01uGWvgCghitM/+7DPr6p8Aqd0:XnOnPIvQ0W6kWWS
- TLSH T1970733C765EDA34ED0C25764A84656CB3CE0752E9EE8583976CE0C05B122E4A42CFF7E
- MD5 SHA1 SHA512 SSDEEP TLSH