General

  • Target
    2026-08-21_4cb49aea8446943c41171280a70d861f_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_rusty-stealer_ryuk_satacom_stealc_vidar
  • Size 70.2MB
  • Sample260822-st1kpahn2v
  • SHA256 b6f7db93dfb345122b7be1b31cfb1561f5eefc89d0cc12cf8194441d5b32f8e0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-21_4cb49aea8446943c41171280a70d861f_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_rusty-stealer_ryuk_satacom_stealc_vidar
    • Size 70.2MB
    • SHA256 b6f7db93dfb345122b7be1b31cfb1561f5eefc89d0cc12cf8194441d5b32f8e0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects MythStealer Java payload

    • Family: MythStealer

      MythStealer is an infostealer written in Rust and operating since December 2024.

    • Enumerates VirtualBox DLL files

    • Looks for VirtualBox drivers on disk

    • Looks for VirtualBox executables on disk

    • Looks for VMWare drivers on disk

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks