General

  • Target
    2025-07-21_47e057d5818024676fa7e341d2e101c6_cobalt-strike_frostygoop_gcleaner_ghostlocker_luca-stealer_snatch.exe
  • Size 3.4MB
  • Sample250721-1atl2ack51
  • SHA256 2498c3c91b0e32d8d8987c93c31f0b39a768e654265420aef7669e290aa93298
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • torjanprefix

C2
  • 10.2.34.26:8081

Targets

    • Target
      2025-07-21_47e057d5818024676fa7e341d2e101c6_cobalt-strike_frostygoop_gcleaner_ghostlocker_luca-stealer_snatch.exe
    • Size 3.4MB
    • SHA256 2498c3c91b0e32d8d8987c93c31f0b39a768e654265420aef7669e290aa93298
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks