General
- Target 2026-08-21_4cb49aea8446943c41171280a70d861f_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_rusty-stealer_ryuk_satacom_stealc_vidar
- Size 70.2MB
- Sample260822-st1kpahn2v
- SHA256 b6f7db93dfb345122b7be1b31cfb1561f5eefc89d0cc12cf8194441d5b32f8e0
- MD5 4cb49aea8446943c41171280a70d861f
- SHA1 28d49b036fe432fb5c5caf439cee5811f7d89996
- SHA512 4b2ef8ae36796bfedd754e7f488d818caaf6a8d635dd860de7727d77a07b80240c004445ae6621b7b677f7e5f8d549cca0f33d4a0f104654f33231dc2c32dcad
- SSDEEP 1572864:F5zzboXOfIrLZD4PBtvCbJnkPZJwvdnhq:F57ouI+PiJkBJwvdnA
- TLSH T15EF7E01BF7A440E6D07BC17982575607EBB2B4544B2097DB32AC1A1D6F23BE59A3E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-21_4cb49aea8446943c41171280a70d861f_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-s.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_4cb49aea8446943c41171280a70d861f_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-s.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_4cb49aea8446943c41171280a70d861f_akira_cobalt-strike_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_rusty-stealer_ryuk_satacom_stealc_vidar
- Size 70.2MB
- SHA256 b6f7db93dfb345122b7be1b31cfb1561f5eefc89d0cc12cf8194441d5b32f8e0
- MD5 4cb49aea8446943c41171280a70d861f
- SHA1 28d49b036fe432fb5c5caf439cee5811f7d89996
- SHA512 4b2ef8ae36796bfedd754e7f488d818caaf6a8d635dd860de7727d77a07b80240c004445ae6621b7b677f7e5f8d549cca0f33d4a0f104654f33231dc2c32dcad
- SSDEEP 1572864:F5zzboXOfIrLZD4PBtvCbJnkPZJwvdnhq:F57ouI+PiJkBJwvdnA
- TLSH T15EF7E01BF7A440E6D07BC17982575607EBB2B4544B2097DB32AC1A1D6F23BE59A3E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects MythStealer Java payload
-
Family: MythStealer
MythStealer is an infostealer written in Rust and operating since December 2024.
-
Enumerates VirtualBox DLL files
-
Looks for VirtualBox drivers on disk
-
Looks for VirtualBox executables on disk
-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL