General
- Target 2026-08-05_d2e7b6d4bd4e2408bbdfa61d47fd767c_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 47.1MB
- Sample260805-spqjxszcmd
- SHA256 89d9cf7a531b7d0233bb381b65bf515a623887bd89e75d11e0f0a83038afc8a8
- MD5 d2e7b6d4bd4e2408bbdfa61d47fd767c
- SHA1 bcb3bf949fdc5d686e2bcc83e42a1c29acf18e3b
- SHA512 765e0b3c02e18785f36c306b588a7c66bc6c384b1d977d17d407de36f8a4e455297815420b53734e2ae392f35abef403c03b1fa38e07a76bc04a969ad909d72d
- SSDEEP 786432:op/vKJcuXvcRg+pY03dLgcAayWFPQUiWDXqbePm1sU6eVLF/nOxKvMl8xUDEwxl0:o1GHvca+73dZJyWlVDabeP2KeHauMCKY
- TLSH T1D4B73354E3F09DAAC076E97649655A57D63AF82D0F600BDF03781EB61E22710C82B7E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_d2e7b6d4bd4e2408bbdfa61d47fd767c_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_d2e7b6d4bd4e2408bbdfa61d47fd767c_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_d2e7b6d4bd4e2408bbdfa61d47fd767c_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 47.1MB
- SHA256 89d9cf7a531b7d0233bb381b65bf515a623887bd89e75d11e0f0a83038afc8a8
- MD5 d2e7b6d4bd4e2408bbdfa61d47fd767c
- SHA1 bcb3bf949fdc5d686e2bcc83e42a1c29acf18e3b
- SHA512 765e0b3c02e18785f36c306b588a7c66bc6c384b1d977d17d407de36f8a4e455297815420b53734e2ae392f35abef403c03b1fa38e07a76bc04a969ad909d72d
- SSDEEP 786432:op/vKJcuXvcRg+pY03dLgcAayWFPQUiWDXqbePm1sU6eVLF/nOxKvMl8xUDEwxl0:o1GHvca+73dZJyWlVDabeP2KeHauMCKY
- TLSH T1D4B73354E3F09DAAC076E97649655A57D63AF82D0F600BDF03781EB61E22710C82B7E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE