General
- Target 2026-08-20_e19cb0ea6627481d91d585fa38e2a20c_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 2.8MB
- Sample260820-26skaacj2v
- SHA256 d1dba0f903f03af711cc7dd9bc914194c1bbb1f14c73b751eebe8b7d2be42941
- MD5 e19cb0ea6627481d91d585fa38e2a20c
- SHA1 28c24fd19e9a90161b89bc277669bb37c46aef8b
- SHA512 7a6031c64d0bf6c0d94d45b0ca76b86cda7da0b9b5d8fbc0c8bddbae9535932ab53a2467ef257b00a178f1c32e07cccebe590979ca7f97d94922485c1ab779a9
- SSDEEP 49152:d6xcx0yecz4qfBkSh3W9dOmO0XK6OP6AJ2J1d0tu4f8kAmSSTVTJmH:d6Ibzfh3WHm0XUPTIkSFSTVTkH
- TLSH T1FED52219D3E504FDE1A7F5B8CE428912EBB378491771E68F03AC99A21F235A08D39753
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_e19cb0ea6627481d91d585fa38e2a20c_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_e19cb0ea6627481d91d585fa38e2a20c_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 2.8MB
- SHA256 d1dba0f903f03af711cc7dd9bc914194c1bbb1f14c73b751eebe8b7d2be42941
- MD5 e19cb0ea6627481d91d585fa38e2a20c
- SHA1 28c24fd19e9a90161b89bc277669bb37c46aef8b
- SHA512 7a6031c64d0bf6c0d94d45b0ca76b86cda7da0b9b5d8fbc0c8bddbae9535932ab53a2467ef257b00a178f1c32e07cccebe590979ca7f97d94922485c1ab779a9
- SSDEEP 49152:d6xcx0yecz4qfBkSh3W9dOmO0XK6OP6AJ2J1d0tu4f8kAmSSTVTJmH:d6Ibzfh3WHm0XUPTIkSFSTVTkH
- TLSH T1FED52219D3E504FDE1A7F5B8CE428912EBB378491771E68F03AC99A21F235A08D39753
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE