General
- Target 2026-08-20_7ec00f9b5871402266745fb98b0e298b_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 2.8MB
- Sample260820-lyd4xstgrg
- SHA256 1ab21d85edc1554bba7d1e8582c8b654b9ec85b3f08e5cd7f9443f2da0048a46
- MD5 7ec00f9b5871402266745fb98b0e298b
- SHA1 be8112a489056d729a808f034e70fd42a9c2b48a
- SHA512 ed5bc97acac585aa70569c84687cefb3443e211cd388e8bdc2a3be3cc9441c7646c7054410b19fcc47610ac899df642174ad24ce4b608ee593f6d2b4c92fdbb5
- SSDEEP 49152:d6xcx0yewzqsaqU7t18i4PGzWyjR93wYSQInvN05AJSLkW19F1L78S5VTkN:d6IBxaqw1Z4OzWMR9lSQANx2Z9378S5M
- TLSH T1C7D51219D7E805FDE0A7E1B4CE528D12DBB3784C0771E68F079C99A61F636908E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_7ec00f9b5871402266745fb98b0e298b_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_7ec00f9b5871402266745fb98b0e298b_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 2.8MB
- SHA256 1ab21d85edc1554bba7d1e8582c8b654b9ec85b3f08e5cd7f9443f2da0048a46
- MD5 7ec00f9b5871402266745fb98b0e298b
- SHA1 be8112a489056d729a808f034e70fd42a9c2b48a
- SHA512 ed5bc97acac585aa70569c84687cefb3443e211cd388e8bdc2a3be3cc9441c7646c7054410b19fcc47610ac899df642174ad24ce4b608ee593f6d2b4c92fdbb5
- SSDEEP 49152:d6xcx0yewzqsaqU7t18i4PGzWyjR93wYSQInvN05AJSLkW19F1L78S5VTkN:d6IBxaqw1Z4OzWMR9lSQANx2Z9378S5M
- TLSH T1C7D51219D7E805FDE0A7E1B4CE528D12DBB3784C0771E68F079C99A61F636908E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE