General
- Target 2026-08-16_3ef5dcab715c50d7ef7ae31491442446_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.2MB
- Sample260816-1he4lsar4w
- SHA256 20278dda78bd9dd34e785cd7d0be6fc012e285f60c1e12028dd06cee05b0b9da
- MD5 3ef5dcab715c50d7ef7ae31491442446
- SHA1 e9e9c86d5056115e4b545a049bc3cd4e26d99091
- SHA512 dd71816ada9a88a95d3f16ece96c10e780fd3f009912b4ef60be23a62c6f7c787da666fa431cca9654449668cbaa23e90e4bc3bd8c772c7d788864be57d1f3ab
- SSDEEP 98304:+KAv5xI7tdTpkgIX/oWp0NaXvIV1X06Mbt69Cl9laEyhssH:+Q7tLIXQvsvIGR69akEIH
- TLSH T171F5122197E404E9F1BBA174C9D39426DA3B7C9A477196CF03AC99770F17A80893DB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_3ef5dcab715c50d7ef7ae31491442446_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_3ef5dcab715c50d7ef7ae31491442446_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_3ef5dcab715c50d7ef7ae31491442446_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 3.2MB
- SHA256 20278dda78bd9dd34e785cd7d0be6fc012e285f60c1e12028dd06cee05b0b9da
- MD5 3ef5dcab715c50d7ef7ae31491442446
- SHA1 e9e9c86d5056115e4b545a049bc3cd4e26d99091
- SHA512 dd71816ada9a88a95d3f16ece96c10e780fd3f009912b4ef60be23a62c6f7c787da666fa431cca9654449668cbaa23e90e4bc3bd8c772c7d788864be57d1f3ab
- SSDEEP 98304:+KAv5xI7tdTpkgIX/oWp0NaXvIV1X06Mbt69Cl9laEyhssH:+Q7tLIXQvsvIGR69akEIH
- TLSH T171F5122197E404E9F1BBA174C9D39426DA3B7C9A477196CF03AC99770F17A80893DB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE