General
- Target 2026-08-14_deb7da52885569bbdef496e7782d324c_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 4.9MB
- Sample260814-svwccsae72
- SHA256 5f44d0dba2be35b801109a66c2b9de6e28849718d64d8d456aae67a6dc9b9964
- MD5 deb7da52885569bbdef496e7782d324c
- SHA1 1f3598ae5f5d21238b7c5dd5c7103fee6d90fed0
- SHA512 97eb3234aa284b3e889233b346c47f1d6ac6d2c8318f9fcbd38fed04ec33e8562295604ebb9e3270e53fc3921e0f5f696129de52eb5f9f62d4d8ade274932a7e
- SSDEEP 98304:J6Is5cXqHULcPU1acf1AAln29wJhIXSon59k6yczt7x4AuCqj:JE5cX081acfiAlVhMj5bzt7x4AuC4
- TLSH T141362315D7F504F8E5B7B6B48E924A42DB3378095B31D29F43AC88695F23690CE3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_deb7da52885569bbdef496e7782d324c_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_deb7da52885569bbdef496e7782d324c_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_deb7da52885569bbdef496e7782d324c_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 4.9MB
- SHA256 5f44d0dba2be35b801109a66c2b9de6e28849718d64d8d456aae67a6dc9b9964
- MD5 deb7da52885569bbdef496e7782d324c
- SHA1 1f3598ae5f5d21238b7c5dd5c7103fee6d90fed0
- SHA512 97eb3234aa284b3e889233b346c47f1d6ac6d2c8318f9fcbd38fed04ec33e8562295604ebb9e3270e53fc3921e0f5f696129de52eb5f9f62d4d8ade274932a7e
- SSDEEP 98304:J6Is5cXqHULcPU1acf1AAln29wJhIXSon59k6yczt7x4AuCqj:JE5cX081acfiAlVhMj5bzt7x4AuC4
- TLSH T141362315D7F504F8E5B7B6B48E924A42DB3378095B31D29F43AC88695F23690CE3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled