General
- Target 2026-08-24_f3ffe8f49380dbed6ba3ad59e9f0ce41_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 2.4MB
- Sample260824-ysws1aeh35
- SHA256 5d6e31b385b7cf40f7fd1463951192669c93323a00e0ee286eab345b6307a072
- MD5 f3ffe8f49380dbed6ba3ad59e9f0ce41
- SHA1 f2bd7960ec1748d371157fcd59c1285e5c10569e
- SHA512 980d63077c92cefc6a80f0e0d87b167da4f04c8627a4b3a8e372000c916a4deaebf40350ba92c6a319ae1ed50bc4b9914f96d9859b75a413590dc03ffe26543f
- SSDEEP 49152:bKA5/fBTNXwzsjw3I3g96+S+AlltyRBZyvZVZvBkV0VSbRrETIYd:bKAXXgsjwY3g96+xGyRUlv+usu
- TLSH T17EC51248E7F415F8E1F7E574CE938A52E7B7780A0361A78F03A055A25F272A09E3D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_f3ffe8f49380dbed6ba3ad59e9f0ce41_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_f3ffe8f49380dbed6ba3ad59e9f0ce41_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_f3ffe8f49380dbed6ba3ad59e9f0ce41_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 2.4MB
- SHA256 5d6e31b385b7cf40f7fd1463951192669c93323a00e0ee286eab345b6307a072
- MD5 f3ffe8f49380dbed6ba3ad59e9f0ce41
- SHA1 f2bd7960ec1748d371157fcd59c1285e5c10569e
- SHA512 980d63077c92cefc6a80f0e0d87b167da4f04c8627a4b3a8e372000c916a4deaebf40350ba92c6a319ae1ed50bc4b9914f96d9859b75a413590dc03ffe26543f
- SSDEEP 49152:bKA5/fBTNXwzsjw3I3g96+S+AlltyRBZyvZVZvBkV0VSbRrETIYd:bKAXXgsjwY3g96+xGyRUlv+usu
- TLSH T17EC51248E7F415F8E1F7E574CE938A52E7B7780A0361A78F03A055A25F272A09E3D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE