General
- Target 2026-08-10_c814fff182d6c93f51cde844ad0223c8_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_rusty-stealer_ryuk_satacom_stealc_vidar
- Size 67.5MB
- Sample260810-salmesbn7s
- SHA256 78ab9a3618d1424b2e49aff4ad43388f429a7fd216f34c9b00c7bcfb2dde7200
- MD5 c814fff182d6c93f51cde844ad0223c8
- SHA1 b3981d043fdc79363a5789e53f8b0ec19f9a76cb
- SHA512 d45bdf925c358549ad099e08f0f72c0c72103469b8f1f7220494809d5a3b2c9db051cc8458f18609a29ed1756c717b1ee7035c492b1b3ffbd75aeb1e406d8f8c
- SSDEEP 1572864:25zzboXOfIrMZD4PBtvCbJnkPZJwvdnh:257ouIFPiJkBJwvdn
- TLSH T133F7F12BF6A440A6D02BC179865B9607DBB2B4544B20D3DB32BC261C6F63BD55B3F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_c814fff182d6c93f51cde844ad0223c8_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-s.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_c814fff182d6c93f51cde844ad0223c8_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-s.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_c814fff182d6c93f51cde844ad0223c8_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_rusty-stealer_ryuk_satacom_stealc_vidar
- Size 67.5MB
- SHA256 78ab9a3618d1424b2e49aff4ad43388f429a7fd216f34c9b00c7bcfb2dde7200
- MD5 c814fff182d6c93f51cde844ad0223c8
- SHA1 b3981d043fdc79363a5789e53f8b0ec19f9a76cb
- SHA512 d45bdf925c358549ad099e08f0f72c0c72103469b8f1f7220494809d5a3b2c9db051cc8458f18609a29ed1756c717b1ee7035c492b1b3ffbd75aeb1e406d8f8c
- SSDEEP 1572864:25zzboXOfIrMZD4PBtvCbJnkPZJwvdnh:257ouIFPiJkBJwvdn
- TLSH T133F7F12BF6A440A6D02BC179865B9607DBB2B4544B20D3DB32BC261C6F63BD55B3F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects MythStealer Java payload
-
Family: MythStealer
MythStealer is an infostealer written in Rust and operating since December 2024.
-
Enumerates VirtualBox DLL files
-
Looks for VirtualBox drivers on disk
-
Looks for VirtualBox executables on disk
-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL