General

  • Target
    2026-09-11_6751f9037f09bfe9730bacce5cb8478c_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
  • Size 955KB
  • Sample260912-ldevqaek7s
  • SHA256 f89a6d082f5b8720ee1458de47c3b3a7a4744c70e108f4f5d8c7d016265e87a6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-11_6751f9037f09bfe9730bacce5cb8478c_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc
    • Size 955KB
    • SHA256 f89a6d082f5b8720ee1458de47c3b3a7a4744c70e108f4f5d8c7d016265e87a6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • UPX dump on OEP (original entry point)

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks