General
- Target 2026-07-20_91b86eb9285c9f6ca40e8bf4d21dcd5a_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 2.1MB
- Sample260720-p83f2sc19t
- SHA256 26acb6aaa5ec77c240da5e590ad9aa328afbbe5c12754c69e0a4694d5bc03e37
- MD5 91b86eb9285c9f6ca40e8bf4d21dcd5a
- SHA1 4833d6b55cb35210e5d1acf66ea4fc47552dd3b8
- SHA512 b525cfcb45463b64874006023a9ba9bcf3da90e9032011f4c2b7261163a28cfcc91689d81c08350e1654110f76baa350d886751621e632b7632a77bc0fc82f6f
- SSDEEP 49152:mCgcvj6GbOu+mh/ENYM+gKsCZOkUf5E4IqOangELU4WWt9PmLdmGYPs:mCgYOu+c/KYMXKhZOXt7gELUHWt9PmJZ
- TLSH T142A5F16DDBE544AED3A26B388DE2DA38D63D7C492F11874B27A029807F37F846D15342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_91b86eb9285c9f6ca40e8bf4d21dcd5a_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_91b86eb9285c9f6ca40e8bf4d21dcd5a_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_91b86eb9285c9f6ca40e8bf4d21dcd5a_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 2.1MB
- SHA256 26acb6aaa5ec77c240da5e590ad9aa328afbbe5c12754c69e0a4694d5bc03e37
- MD5 91b86eb9285c9f6ca40e8bf4d21dcd5a
- SHA1 4833d6b55cb35210e5d1acf66ea4fc47552dd3b8
- SHA512 b525cfcb45463b64874006023a9ba9bcf3da90e9032011f4c2b7261163a28cfcc91689d81c08350e1654110f76baa350d886751621e632b7632a77bc0fc82f6f
- SSDEEP 49152:mCgcvj6GbOu+mh/ENYM+gKsCZOkUf5E4IqOangELU4WWt9PmLdmGYPs:mCgYOu+c/KYMXKhZOXt7gELUHWt9PmJZ
- TLSH T142A5F16DDBE544AED3A26B388DE2DA38D63D7C492F11874B27A029807F37F846D15342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
AutoIT Executable
AutoIT scripts compiled to PE executables.