General
- Target 2026-07-21_696bf8d959f3e5abac68439eabaf2dba_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 46.3MB
- Sample260721-1mfkyafe94
- SHA256 d7b3d2fbfcc73a5269960f3371c112ae1e743b013d2ecc46c01b3aa741a29aa5
- MD5 696bf8d959f3e5abac68439eabaf2dba
- SHA1 2f06dd6de101480fc1484a98687782b3954a5fe6
- SHA512 14daa8872dc56b974999d7372df88a330f26c94bdb0e81a33e1186e2d12ec04b7f16067c8c4a6d2bb34d7e484e309308b7e60c5759fcf23b381a0bd6e26658af
- SSDEEP 786432:1jAVtEJTqDc+QN9M/3gcpCoZrc31TDTWXwMQkEGqqDCFn+WlLs3kYDO9wjrtcLzu:1cmTWmvM/xCoZrcBf1MbEh+WlLsPDO2f
- TLSH T154B73357BBB540BEE427D5B09DE2CC67EF3A344E07216A4FB3500DA70F372814A59AA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_696bf8d959f3e5abac68439eabaf2dba_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_696bf8d959f3e5abac68439eabaf2dba_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_696bf8d959f3e5abac68439eabaf2dba_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 46.3MB
- SHA256 d7b3d2fbfcc73a5269960f3371c112ae1e743b013d2ecc46c01b3aa741a29aa5
- MD5 696bf8d959f3e5abac68439eabaf2dba
- SHA1 2f06dd6de101480fc1484a98687782b3954a5fe6
- SHA512 14daa8872dc56b974999d7372df88a330f26c94bdb0e81a33e1186e2d12ec04b7f16067c8c4a6d2bb34d7e484e309308b7e60c5759fcf23b381a0bd6e26658af
- SSDEEP 786432:1jAVtEJTqDc+QN9M/3gcpCoZrc31TDTWXwMQkEGqqDCFn+WlLs3kYDO9wjrtcLzu:1cmTWmvM/xCoZrcBf1MbEh+WlLsPDO2f
- TLSH T154B73357BBB540BEE427D5B09DE2CC67EF3A344E07216A4FB3500DA70F372814A59AA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables manipulated with Fody
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL