General
- Target 2026-07-22_bde886ec35c553275d4529dcdf6ec998_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 51.4MB
- Sample260722-vm8zlazare
- SHA256 133f66fee504c31999ce3d487e627c72e14a303202c572895e7066252bfa717e
- MD5 bde886ec35c553275d4529dcdf6ec998
- SHA1 0d6bf0703df134ca29eefc9d21fa5124246fbf94
- SHA512 d5de4fd3b3a7a758a151ac0e32d8164bdad733193391ee50a96ab62ac8ed82aa2d5560622a4b418a5924e0d47da2b2d761151c66d357a9d49010962763b64636
- SSDEEP 786432:8a6cUqQzajzEnQIny+1DxbwFkeAx1bsGKWGKhLYCN9yucz1o1v:2M25eAx1SELjyPz1Ev
- TLSH T10AC73306B724DCE6D153B57C82D1DB26C225BBDC1725DB8B45B25CA3BA63DA30CB82C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_bde886ec35c553275d4529dcdf6ec998_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_bde886ec35c553275d4529dcdf6ec998_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 51.4MB
- SHA256 133f66fee504c31999ce3d487e627c72e14a303202c572895e7066252bfa717e
- MD5 bde886ec35c553275d4529dcdf6ec998
- SHA1 0d6bf0703df134ca29eefc9d21fa5124246fbf94
- SHA512 d5de4fd3b3a7a758a151ac0e32d8164bdad733193391ee50a96ab62ac8ed82aa2d5560622a4b418a5924e0d47da2b2d761151c66d357a9d49010962763b64636
- SSDEEP 786432:8a6cUqQzajzEnQIny+1DxbwFkeAx1bsGKWGKhLYCN9yucz1o1v:2M25eAx1SELjyPz1Ev
- TLSH T10AC73306B724DCE6D153B57C82D1DB26C225BBDC1725DB8B45B25CA3BA63DA30CB82C1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory