General
- Target 2026-07-18_6eb78172178a40a9c122c72c2bd01c13_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.7MB
- Sample260718-va2praf13q
- SHA256 b2b279d32a7909d5e7c0e29f767b5bccb34541b76a3e4548a17b4e0c9bab8f4e
- MD5 6eb78172178a40a9c122c72c2bd01c13
- SHA1 be0145641d829bb37bc35753c6196e19e417d772
- SHA512 b8825eba52352522e12a3be27eed5ed39aee8f48e19455db97cbdd2511e6573f5b96605186849f92cf42a1645bdfa3bf16de46b2bac0838db01cb2936f866bae
- SSDEEP 49152:37JynhJ8EhdVMw7Y9odwfDFqfFFJVgrvqzbut1wOq/eVgXUeT+uXEkjNEEBHLumw:WsoEC9Aa+uUkjDBHLu7sRwsla
- TLSH T13B06AE0AA7E406ACE0F7C679CED6C553D776B80D07B1A68F029098A64F772609F39713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_6eb78172178a40a9c122c72c2bd01c13_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_6eb78172178a40a9c122c72c2bd01c13_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.7MB
- SHA256 b2b279d32a7909d5e7c0e29f767b5bccb34541b76a3e4548a17b4e0c9bab8f4e
- MD5 6eb78172178a40a9c122c72c2bd01c13
- SHA1 be0145641d829bb37bc35753c6196e19e417d772
- SHA512 b8825eba52352522e12a3be27eed5ed39aee8f48e19455db97cbdd2511e6573f5b96605186849f92cf42a1645bdfa3bf16de46b2bac0838db01cb2936f866bae
- SSDEEP 49152:37JynhJ8EhdVMw7Y9odwfDFqfFFJVgrvqzbut1wOq/eVgXUeT+uXEkjNEEBHLumw:WsoEC9Aa+uUkjDBHLu7sRwsla
- TLSH T13B06AE0AA7E406ACE0F7C679CED6C553D776B80D07B1A68F029098A64F772609F39713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Modifies system executable filetype association
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1