General
- Target 2026-08-03_78f09281e1652f4f80183ce28622dd30_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 81.7MB
- Sample260804-c87pjseq3t
- SHA256 4fe11e2021d785de3c7497ca73029a838f50f1e61b0b1e866cac02395bc7c77a
- MD5 78f09281e1652f4f80183ce28622dd30
- SHA1 c044927a216d468a3f630cad2e2234ebd1de3af1
- SHA512 49c63da1ab8200c38517ed7e01fc77d3f2fcb883adab9cb630958382bf176f0b76fc1c734e71fc9ee98ad3695862bec0c31907f8029582bcead651e9508d591e
- SSDEEP 1572864:hchcjhIra+eTL8i0ew35a3PWDpBeKw3croV+e4fduNTNBzO4UsKUVsyU9QiQ9Rqg:hd1Iraxypa3PWD3o8e4fdUxosKUVsyUI
- TLSH T1EF18332ECBA5B3BCE116FA78DC82D844D23B6C5C2B74975F435A89828FA13505B38335
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_78f09281e1652f4f80183ce28622dd30_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_78f09281e1652f4f80183ce28622dd30_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_78f09281e1652f4f80183ce28622dd30_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 81.7MB
- SHA256 4fe11e2021d785de3c7497ca73029a838f50f1e61b0b1e866cac02395bc7c77a
- MD5 78f09281e1652f4f80183ce28622dd30
- SHA1 c044927a216d468a3f630cad2e2234ebd1de3af1
- SHA512 49c63da1ab8200c38517ed7e01fc77d3f2fcb883adab9cb630958382bf176f0b76fc1c734e71fc9ee98ad3695862bec0c31907f8029582bcead651e9508d591e
- SSDEEP 1572864:hchcjhIra+eTL8i0ew35a3PWDpBeKw3croV+e4fduNTNBzO4UsKUVsyU9QiQ9Rqg:hd1Iraxypa3PWD3o8e4fdUxosKUVsyUI
- TLSH T1EF18332ECBA5B3BCE116FA78DC82D844D23B6C5C2B74975F435A89828FA13505B38335
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL