General
- Target 2026-08-03_8d51fcdcbb3c64c98ed424811ff08f18_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 51.3MB
- Sample260803-nl22bshr3t
- SHA256 9c35d85bebb70ee60f25f314a1f73dc81407998718792382e25464f77a81511d
- MD5 8d51fcdcbb3c64c98ed424811ff08f18
- SHA1 465fd18e614442a3f24fcfad4be5b2c2f7973758
- SHA512 88f366b8e89591ccea6694f4408954de4e27215be75f8dce00a70b733a77e079fbdcccbbd255141d7adb9ce03b78a073364f779f180f35c20c3a171e8130f62b
- SSDEEP 1572864:NV9hm3/xmV2IpPjbEWANHYfB8azWZvppqL1PtZtSlZEst:X6PxYAmBbqvpQA
- TLSH T166C7332CE37815F9FDAB66748DAB0202E6BAFC554BE1E6878568BF331B71240D127710
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_8d51fcdcbb3c64c98ed424811ff08f18_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_8d51fcdcbb3c64c98ed424811ff08f18_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_8d51fcdcbb3c64c98ed424811ff08f18_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 51.3MB
- SHA256 9c35d85bebb70ee60f25f314a1f73dc81407998718792382e25464f77a81511d
- MD5 8d51fcdcbb3c64c98ed424811ff08f18
- SHA1 465fd18e614442a3f24fcfad4be5b2c2f7973758
- SHA512 88f366b8e89591ccea6694f4408954de4e27215be75f8dce00a70b733a77e079fbdcccbbd255141d7adb9ce03b78a073364f779f180f35c20c3a171e8130f62b
- SSDEEP 1572864:NV9hm3/xmV2IpPjbEWANHYfB8azWZvppqL1PtZtSlZEst:X6PxYAmBbqvpQA
- TLSH T166C7332CE37815F9FDAB66748DAB0202E6BAFC554BE1E6878568BF331B71240D127710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.