Overview

overview

10

Static

static

10

2026-05-13...ar.exe

windows10-2004-x64

7

Resubmissions

27/05/2026, 16:17

260527-trp7lsb14r10

13/05/2026, 02:31

260513-cz861sgs5k10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-05-13_5fd1c91cb96621f80d2a30b0fcb45746_glassworm_hijackloader_icedid_luca-stealer_ngrbot_njrat_poet-rat_vidar
  • Size 25.7MB
  • Sample260527-trp7lsb14r
  • SHA256 6226a5c035d500ae8deb55bd3edb672af3d3b48135cb66a430005eb10ece5be8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
751stealerspywarestealer

Malware Config

Extracted

Family

  • 751stealer

C2

  • http://172.239.129.158:8080

Attributes
  • anti_debug

    true

  • anti_vm

    true

  • av_bypass

    false

  • fake_error

    true

  • owner_id

    cc02514c97fb4031

  • startup

    false

  • uac_bypass

    true

Targets

    • Target
      2026-05-13_5fd1c91cb96621f80d2a30b0fcb45746_glassworm_hijackloader_icedid_luca-stealer_ngrbot_njrat_poet-rat_vidar
    • Size 25.7MB
    • SHA256 6226a5c035d500ae8deb55bd3edb672af3d3b48135cb66a430005eb10ece5be8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    spywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks