General
- Target 2026-08-30_1ff5d9fe85288dc36fbf2daa8e363861_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 478KB
- Sample260830-zkrprazald
- SHA256 63ff4a4334f42855a39605f77b9b2023687fa3bc45c34688b0ec83902e420a0b
- MD5 1ff5d9fe85288dc36fbf2daa8e363861
- SHA1 e777dbeece1bd343b72e997f7d13485aab719307
- SHA512 e191b9b9c5d09b9b3030c054d29b766f643b720f34e847eb7114df318f73a4d54efacad96ddf66a973d7f44d3d9fd3c4c48a171b5729408c0484611c00aa5b75
- SSDEEP 6144:0Rs9Djkimq76tIy5qHbh4ZkcRKCfmJLaImb4zG8GRIJ/1Q4gJulCHQ3:HciZ4qN4ZkKdcLtmUzG8GIJ9Eu0K
- TLSH T103A47D1DE7F405F9E0A7E178CD834942E7767C494761E6CF03A4A9A61F232A09E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_1ff5d9fe85288dc36fbf2daa8e363861_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_1ff5d9fe85288dc36fbf2daa8e363861_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_1ff5d9fe85288dc36fbf2daa8e363861_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 478KB
- SHA256 63ff4a4334f42855a39605f77b9b2023687fa3bc45c34688b0ec83902e420a0b
- MD5 1ff5d9fe85288dc36fbf2daa8e363861
- SHA1 e777dbeece1bd343b72e997f7d13485aab719307
- SHA512 e191b9b9c5d09b9b3030c054d29b766f643b720f34e847eb7114df318f73a4d54efacad96ddf66a973d7f44d3d9fd3c4c48a171b5729408c0484611c00aa5b75
- SSDEEP 6144:0Rs9Djkimq76tIy5qHbh4ZkcRKCfmJLaImb4zG8GRIJ/1Q4gJulCHQ3:HciZ4qN4ZkKdcLtmUzG8GIJ9Eu0K
- TLSH T103A47D1DE7F405F9E0A7E178CD834942E7767C494761E6CF03A4A9A61F232A09E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory