General
- Target 2026-08-18_5140fb63c1de794e3ae1270360c7fa5e_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 5.3MB
- Sample260819-c2t5wavfph
- SHA256 7650821185661c85453cc2027ca6241ed6ff5e4610760caa7412ea9c1457b12a
- MD5 5140fb63c1de794e3ae1270360c7fa5e
- SHA1 fa4049b0366001bfeac69a520eab9d0e4f826993
- SHA512 4ec8416332fc3c19d4a07ddeee61e5bf0b3976a0d2b8236899da1833ec1fe8b53e3ade40c5f376ea6f293e0c0f112635994f478f2598ce4fe9643b41c83becb4
- SSDEEP 98304:8KAQ58Eek+V0VyZG1vCqLfWrtX6FmrH9HTk1hlWcsrpyPVb7pG:8o+kYZenotX6IrH9HTwbWub7pG
- TLSH T195462349E7A405FDE4A3D1B8DD820A17F7717C9907A19BDF13A0A9A21F233905E3DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_5140fb63c1de794e3ae1270360c7fa5e_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_5140fb63c1de794e3ae1270360c7fa5e_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_5140fb63c1de794e3ae1270360c7fa5e_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 5.3MB
- SHA256 7650821185661c85453cc2027ca6241ed6ff5e4610760caa7412ea9c1457b12a
- MD5 5140fb63c1de794e3ae1270360c7fa5e
- SHA1 fa4049b0366001bfeac69a520eab9d0e4f826993
- SHA512 4ec8416332fc3c19d4a07ddeee61e5bf0b3976a0d2b8236899da1833ec1fe8b53e3ade40c5f376ea6f293e0c0f112635994f478f2598ce4fe9643b41c83becb4
- SSDEEP 98304:8KAQ58Eek+V0VyZG1vCqLfWrtX6FmrH9HTk1hlWcsrpyPVb7pG:8o+kYZenotX6IrH9HTwbWub7pG
- TLSH T195462349E7A405FDE4A3D1B8DD820A17F7717C9907A19BDF13A0A9A21F233905E3DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE