General
- Target 2026-08-23_481bdd5285e7fc1a68bc776b8f0e0213_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 878KB
- Sample260824-pv673sdd73
- SHA256 735805f8d687b584e3bddd1992444ac7c400c23fdad9c67e775dbdb81533e975
- MD5 481bdd5285e7fc1a68bc776b8f0e0213
- SHA1 597b1cf57db4222f8a2713b4eb2229218bd3203b
- SHA512 f74a01d5018e5e565df0fbcbae7507ef8402bfe2e592e892b25b10d05ce170369b6d02b4113dc2f9ac212da24bcc369f412fc920634e5897be77b460659e2cf5
- SSDEEP 12288:IciZ4qN4ZkKdcLtmUzG8GIJ9EhqGOmueCiKWe4ymgGLDONHc:H25kkKdcLt08/9sqGmsKd4ymZqNc
- TLSH T108157D19F6A7C4B8D3A29574896245F2F7B67C8D07609A8F0390FA652E331D08D3B732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_481bdd5285e7fc1a68bc776b8f0e0213_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_481bdd5285e7fc1a68bc776b8f0e0213_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_481bdd5285e7fc1a68bc776b8f0e0213_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 878KB
- SHA256 735805f8d687b584e3bddd1992444ac7c400c23fdad9c67e775dbdb81533e975
- MD5 481bdd5285e7fc1a68bc776b8f0e0213
- SHA1 597b1cf57db4222f8a2713b4eb2229218bd3203b
- SHA512 f74a01d5018e5e565df0fbcbae7507ef8402bfe2e592e892b25b10d05ce170369b6d02b4113dc2f9ac212da24bcc369f412fc920634e5897be77b460659e2cf5
- SSDEEP 12288:IciZ4qN4ZkKdcLtmUzG8GIJ9EhqGOmueCiKWe4ymgGLDONHc:H25kkKdcLt08/9sqGmsKd4ymZqNc
- TLSH T108157D19F6A7C4B8D3A29574896245F2F7B67C8D07609A8F0390FA652E331D08D3B732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE