General
- Target 2026-07-22_53f9f07b59bb578ed17134c0a8f79e6a_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 34.6MB
- Sample260722-weg2ks1bnb
- SHA256 ba7437df0dbe04a14923a4988ff682d2e5db158e01b06671a30e477bc811e1f7
- MD5 53f9f07b59bb578ed17134c0a8f79e6a
- SHA1 207f5026db14d6ca619fd50c7fdff3408a55a54d
- SHA512 8c7e9f4cf87c4ef361dab5166a575074de7c2952de3039c79f6f0afa26b14e4214c15a964617336a49bcd11983167cfb698abe3ff43493c1849c29d12a4b60bd
- SSDEEP 786432:OP25tWqlGRhGKYZO2sppHWjKjlneaTEvpAUbFr7DoI9baJgOW:KUrl8hGi2WpHWelnea4GWEoaqOW
- TLSH T161873317D2FC04AEF5B26170C2E6CD42CB77380D27B08B4E5BD9252B0F276506A7AB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_53f9f07b59bb578ed17134c0a8f79e6a_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_53f9f07b59bb578ed17134c0a8f79e6a_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_53f9f07b59bb578ed17134c0a8f79e6a_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 34.6MB
- SHA256 ba7437df0dbe04a14923a4988ff682d2e5db158e01b06671a30e477bc811e1f7
- MD5 53f9f07b59bb578ed17134c0a8f79e6a
- SHA1 207f5026db14d6ca619fd50c7fdff3408a55a54d
- SHA512 8c7e9f4cf87c4ef361dab5166a575074de7c2952de3039c79f6f0afa26b14e4214c15a964617336a49bcd11983167cfb698abe3ff43493c1849c29d12a4b60bd
- SSDEEP 786432:OP25tWqlGRhGKYZO2sppHWjKjlneaTEvpAUbFr7DoI9baJgOW:KUrl8hGi2WpHWelnea4GWEoaqOW
- TLSH T161873317D2FC04AEF5B26170C2E6CD42CB77380D27B08B4E5BD9252B0F276506A7AB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE