General
- Target 2026-09-10_522963252f77b817c4d702e014b6edd8_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 27.3MB
- Sample260910-vd2h6adg92
- SHA256 89281aa213e7ebb6a6ee550e23d9b24df5c0bb6419c9eda526cab0ee86bd5915
- MD5 522963252f77b817c4d702e014b6edd8
- SHA1 319f81c9e275fe34e1c19d6b9936c881b4fcc187
- SHA512 a0389539a0f34934130524e3f4975710e57fe6591045929272aac17b550f10603dd5bc8a4f9d59211935a761a250962fe52cc695d6bc5a569c0ab9d1a9f10330
- SSDEEP 393216:8z6JM9T9YOOHtthQJfchCf0vURF63sQxvb40ZPpO5txhMBHlppLmlC5NPlbq/hRo:k6a9JBmCzl63sQ1BBO5DOpVaRJzhw
- TLSH T15557330AD68414E8EA62DD75C9964C2ACB37785C6760E1CF53F03AA05F232D4AE3DB47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_522963252f77b817c4d702e014b6edd8_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_522963252f77b817c4d702e014b6edd8_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_522963252f77b817c4d702e014b6edd8_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 27.3MB
- SHA256 89281aa213e7ebb6a6ee550e23d9b24df5c0bb6419c9eda526cab0ee86bd5915
- MD5 522963252f77b817c4d702e014b6edd8
- SHA1 319f81c9e275fe34e1c19d6b9936c881b4fcc187
- SHA512 a0389539a0f34934130524e3f4975710e57fe6591045929272aac17b550f10603dd5bc8a4f9d59211935a761a250962fe52cc695d6bc5a569c0ab9d1a9f10330
- SSDEEP 393216:8z6JM9T9YOOHtthQJfchCf0vURF63sQxvb40ZPpO5txhMBHlppLmlC5NPlbq/hRo:k6a9JBmCzl63sQ1BBO5DOpVaRJzhw
- TLSH T15557330AD68414E8EA62DD75C9964C2ACB37785C6760E1CF53F03AA05F232D4AE3DB47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL