General

  • Target
    2026-08-10_c814fff182d6c93f51cde844ad0223c8_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_rusty-stealer_ryuk_satacom_stealc_vidar
  • Size 67.5MB
  • Sample260810-salmesbn7s
  • SHA256 78ab9a3618d1424b2e49aff4ad43388f429a7fd216f34c9b00c7bcfb2dde7200
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-10_c814fff182d6c93f51cde844ad0223c8_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_rusty-stealer_ryuk_satacom_stealc_vidar
    • Size 67.5MB
    • SHA256 78ab9a3618d1424b2e49aff4ad43388f429a7fd216f34c9b00c7bcfb2dde7200
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects MythStealer Java payload

    • Family: MythStealer

      MythStealer is an infostealer written in Rust and operating since December 2024.

    • Enumerates VirtualBox DLL files

    • Looks for VirtualBox drivers on disk

    • Looks for VirtualBox executables on disk

    • Looks for VMWare drivers on disk

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks