svcstealer | 11fcc9276d6232a2ed3314256c80ca74e3e342361bae2757bdea97ed9cf3e145

General

Target
2026-08-10_7e4a74ebce1baf195a48d58e8460d46f_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
Size 2.2MB
Sample260810-ct89tshm6w
SHA256 11fcc9276d6232a2ed3314256c80ca74e3e342361bae2757bdea97ed9cf3e145
MD5 7e4a74ebce1baf195a48d58e8460d46f
SHA1 cc2034ef357e26a1ac873564cfd5f4faf99a39ce
SHA512 46a068fac077718bf8482e39e85d7c1b6d5caf73b8a62356d813bf6b87738a1819cbeae1c392d89a4a096e623a53a76133063e140a0af472f123ce259a64c800
SSDEEP 24576:JF2+tWxv0/Zyrai7rKUwtBRigsofoF4ZvJwGUPq7hzVbEjt5stVtdIXvlHnKBN2v:4v0EOi1wPRigsuznUukst7dI9qBYfJ
TLSH
T185B59F5AA3B801FDD0BBC274C9175647DBB2B8471270979F13E0479A2F23B616E6E321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-10_7e4a74ebce1baf195a48d58e8460d46f_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 2.2MB
- SHA256 11fcc9276d6232a2ed3314256c80ca74e3e342361bae2757bdea97ed9cf3e145
- MD5 7e4a74ebce1baf195a48d58e8460d46f
- SHA1 cc2034ef357e26a1ac873564cfd5f4faf99a39ce
- SHA512 46a068fac077718bf8482e39e85d7c1b6d5caf73b8a62356d813bf6b87738a1819cbeae1c392d89a4a096e623a53a76133063e140a0af472f123ce259a64c800
- SSDEEP 24576:JF2+tWxv0/Zyrai7rKUwtBRigsofoF4ZvJwGUPq7hzVbEjt5stVtdIXvlHnKBN2v:4v0EOi1wPRigsuznUukst7dI9qBYfJ
- TLSH
  T185B59F5AA3B801FDD0BBC274C9175647DBB2B8471270979F13E0479A2F23B616E6E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader svcstealer spyware stealer
- Detects SvcStealer Payload
  SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.
- Family: SvcStealer, Diamotrix
  SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.
  stealer downloader svcstealer
- Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
- Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers
- Detects executables referencing many IR and analysis tools
- Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2