General
- Target 2026-08-08_4ba12f144922558433b7fb2f54f229cb_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 100.0MB
- Sample260808-gjpjws1elf
- SHA256 f1188ec53d7b067b2637b943e10ccf54be5b065febd2d1096bc2afc15c05ff17
- MD5 4ba12f144922558433b7fb2f54f229cb
- SHA1 c50912eb27eff3577ebf365e579f6ac3ba63cb78
- SHA512 aa4a05855c62ef0371579821c871ecbc68ab162c72e086209c2da3b85437847b5a20eb9fdc99ba56e9e20c23c00f462ff2963585b40c76a41c543b2a6a905072
- SSDEEP 3145728:YdUB2cyQxDG6oQqQRQUSs/kBGEtfl52eS1uZUkXcTmaE68QrT9:YqB2cTx6bXLlrGENX2U7sgY
- TLSH T1E33833C9C3717564E1692D7C460D8228CB74FC195B319BCB46E6236E7FA3AE81B36306
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_4ba12f144922558433b7fb2f54f229cb_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_4ba12f144922558433b7fb2f54f229cb_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 100.0MB
- SHA256 f1188ec53d7b067b2637b943e10ccf54be5b065febd2d1096bc2afc15c05ff17
- MD5 4ba12f144922558433b7fb2f54f229cb
- SHA1 c50912eb27eff3577ebf365e579f6ac3ba63cb78
- SHA512 aa4a05855c62ef0371579821c871ecbc68ab162c72e086209c2da3b85437847b5a20eb9fdc99ba56e9e20c23c00f462ff2963585b40c76a41c543b2a6a905072
- SSDEEP 3145728:YdUB2cyQxDG6oQqQRQUSs/kBGEtfl52eS1uZUkXcTmaE68QrT9:YqB2cTx6bXLlrGENX2U7sgY
- TLSH T1E33833C9C3717564E1692D7C460D8228CB74FC195B319BCB46E6236E7FA3AE81B36306
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE