litellm_stealer | 8eaf4c4d0b82620bcda29b97896e2da0a754205c035721479f7ceafb817e4466 | Triage™

Login
Reports

Overview

overview

Static

static

8eaf4c4d0b...466.py

windows11-21h2-x64

8

Resubmissions

08/04/2026, 17:26

260408-vzzaxshs8q

08/04/2026, 17:14

260408-vsfv1aav9y10

08/04/2026, 17:11

260408-vqkq6sgz2m10

08/04/2026, 17:09

260408-vpe5asav2x10

08/04/2026, 17:06

260408-vmn97agx9j10

08/04/2026, 17:02

260408-vj7blagx4m10

01/04/2026, 15:56

260401-tdtmwadz7j10

25/03/2026, 07:32

260325-jc3jaabw6z3

Sharing

Copy URL Twitter E-mail

General

Target
8eaf4c4d0b82620bcda29b97896e2da0a754205c035721479f7ceafb817e4466.py
Size 28KB
Sample260408-vsfv1aav9y
SHA256 8eaf4c4d0b82620bcda29b97896e2da0a754205c035721479f7ceafb817e4466
MD5 ae60726d04bc06d0c623e567e8e9b241
SHA1 62e99d73df6bb5d7dfc2cb7415cf9469d96d5913
SHA512 9e08e122e39d0eb3397bcf6bdee9de2cf9dd3dc1124e66da7c6edb1910aebc09fbee046710cf2f199969aaf27bd1567bf7473b9b9ce6ff0ea5ca6568b069d4f6
SSDEEP 768:6ZVBVQQPrEnfjVMx2gVxTqm1g42Q5vY1gtNHh0:6p7db1xjvKgtD0
TLSH
T112D27D139FAB3E436B65E66402CE06C84F2D5B8D14B309DCF91ED69D470982AA0F50FD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

litellm_stealer adware discovery persistence ransomware spyware

Static task

static1

2 signatures

litellm_stealer

Behavioral task

behavioral1

Sample

8eaf4c4d0b82620bcda29b97896e2da0a754205c035721479f7ceafb817e4466.py

Resource

win11-20260130-en

windows11-21h2-x64

23 signatures

900 seconds

adware discovery persistence ransomware spyware

Malware Config

Targets

- Target
  8eaf4c4d0b82620bcda29b97896e2da0a754205c035721479f7ceafb817e4466.py
- Size 28KB
- SHA256 8eaf4c4d0b82620bcda29b97896e2da0a754205c035721479f7ceafb817e4466
- MD5 ae60726d04bc06d0c623e567e8e9b241
- SHA1 62e99d73df6bb5d7dfc2cb7415cf9469d96d5913
- SHA512 9e08e122e39d0eb3397bcf6bdee9de2cf9dd3dc1124e66da7c6edb1910aebc09fbee046710cf2f199969aaf27bd1567bf7473b9b9ce6ff0ea5ca6568b069d4f6
- SSDEEP 768:6ZVBVQQPrEnfjVMx2gVxTqm1g42Q5vY1gtNHh0:6p7db1xjvKgtD0
- TLSH
  T112D27D139FAB3E436B65E66402CE06C84F2D5B8D14B309DCF91ED69D470982AA0F50FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

litellm_stealer

behavioral1

adwarediscoverypersistenceransomwarespyware

© 2018-2026

Terms | Privacy