General
- Target 2026-09-24_ccd7b95db3e8f0fc7e8bf8a76ce553e3_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 10.2MB
- Sample260924-16kc8stbpd
- SHA256 dbb41a52b8f1757c1a33d522613dc57a7dd4d9dd98bc0a0c1a4e43cf85a0b5fe
- MD5 ccd7b95db3e8f0fc7e8bf8a76ce553e3
- SHA1 dfde3412b3b1e537b70b0eef442c4e4bce29d4ac
- SHA512 70168c4bd99f4b65f245045a4f44ce525c9a146bf56a11f470d6b44382cdcbc399262df868e56ef217697b8efe28e71854014d86ba39e7ee7b47754a7e07d6d5
- SSDEEP 196608:L9Ayx2JZFC07Iefxj9gajeuUbXdyjC0yDQEwSGq9NwqONOSkZkbNWttev:5tx2MXefrgCeuUbNyjdlSGmw3OSkZkbN
- TLSH T1A1B63319DAE115FAF0E2C7B49E620D11FAB5BC5E53B26A8F236064951F376E01F29303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_ccd7b95db3e8f0fc7e8bf8a76ce553e3_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_ccd7b95db3e8f0fc7e8bf8a76ce553e3_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_ccd7b95db3e8f0fc7e8bf8a76ce553e3_cryptbot_icedid_luca-stealer_njrat_stealc
- Size 10.2MB
- SHA256 dbb41a52b8f1757c1a33d522613dc57a7dd4d9dd98bc0a0c1a4e43cf85a0b5fe
- MD5 ccd7b95db3e8f0fc7e8bf8a76ce553e3
- SHA1 dfde3412b3b1e537b70b0eef442c4e4bce29d4ac
- SHA512 70168c4bd99f4b65f245045a4f44ce525c9a146bf56a11f470d6b44382cdcbc399262df868e56ef217697b8efe28e71854014d86ba39e7ee7b47754a7e07d6d5
- SSDEEP 196608:L9Ayx2JZFC07Iefxj9gajeuUbXdyjC0yDQEwSGq9NwqONOSkZkbNWttev:5tx2MXefrgCeuUbNyjdlSGmw3OSkZkbN
- TLSH T1A1B63319DAE115FAF0E2C7B49E620D11FAB5BC5E53B26A8F236064951F376E01F29303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL