General
- Target 2026-07-24_6d2d5ef0de2e9f8473ca6e55a00a1bb8_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 58.9MB
- Sample260724-mal1asck3s
- SHA256 717180c51bd69d7eb6128d6a8a03f15179235bb8ce12c3b07dd22855943ba444
- MD5 6d2d5ef0de2e9f8473ca6e55a00a1bb8
- SHA1 98b2af59a87b6b68f3863edcf20937674977e3e9
- SHA512 04411ad5ab1ebe392f2e7d456f870851a2d8af265e73196418b7c141be240e81cb4b298ce6f69bdea83c02d9a41023444e25a9be9d657c27d72783f1d1332b9c
- SSDEEP 1572864:4cZDv+/jS/ueVkMx7FOJGsUjdeKTyUI8MxyfKPSoCX7F:ZCbovy4FOcbZeKTIFwSPo
- TLSH T1B8D7335DC2BD94FFD67FE03296826118DBB37C5A13A9129B437864E76FA2BD01021B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_6d2d5ef0de2e9f8473ca6e55a00a1bb8_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_6d2d5ef0de2e9f8473ca6e55a00a1bb8_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_6d2d5ef0de2e9f8473ca6e55a00a1bb8_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 58.9MB
- SHA256 717180c51bd69d7eb6128d6a8a03f15179235bb8ce12c3b07dd22855943ba444
- MD5 6d2d5ef0de2e9f8473ca6e55a00a1bb8
- SHA1 98b2af59a87b6b68f3863edcf20937674977e3e9
- SHA512 04411ad5ab1ebe392f2e7d456f870851a2d8af265e73196418b7c141be240e81cb4b298ce6f69bdea83c02d9a41023444e25a9be9d657c27d72783f1d1332b9c
- SSDEEP 1572864:4cZDv+/jS/ueVkMx7FOJGsUjdeKTyUI8MxyfKPSoCX7F:ZCbovy4FOcbZeKTIFwSPo
- TLSH T1B8D7335DC2BD94FFD67FE03296826118DBB37C5A13A9129B437864E76FA2BD01021B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory