Extracted

• • Target
    2026-08-08_5472768187f78e8a807e10caa2e061cd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
  • Size 879KB
  • SHA256 747d1c798e169387956dca2b78adb20ee88c3c31fece72d5d8f4fc7b43970047
  • MD5 5472768187f78e8a807e10caa2e061cd
  • SHA1 5a27776f8a84ed53b724b3fc12fc0fc9ee1e4836
  • SHA512 4a373c8d38a4e20094c8cb778e20448c66636604d7a1a049390f52ad0e2644079065292aad0e463aa54d34b61a18cc53fedbbe5245ebe29b913a0344a8cb6dd8
  • SSDEEP 12288:9cFzPyOOwOz5XdcIaDkZFai8E82kEsbxiqdrS/dwyKbl/WKrJTnHG2vpfjjflmDa:4r05XdcjonJsX8dwyKblv1DG2Dn
  • TLSH
    T141156D16A66400BDD0B7C6B4CE665D43E771B84A0370AADB03D05EA63E277E45E3EF12
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  discoveryspywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery
  behavioral1behavioral2