Extracted

• • Target
    2026-08-22_b390f313001995de3c984fe140efd056_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
  • Size 883KB
  • SHA256 8d374bc3c865f0a084ae4e5cab74c8ab732dd440ab60bc34e8f575fb712c9cee
  • MD5 b390f313001995de3c984fe140efd056
  • SHA1 04f86a2874be2d0d4c70d1158518a9e7e46da7bd
  • SHA512 259bc53d809b3dab650c2e58fedc94b3a39f9dd03ac3b914b6a9ba884a184ba22c5ca7c1ca49b865c799a6dfb65cff0477c2eadb7304c377db9b38d4c09c16db
  • SSDEEP 12288:NDTNUNcCtUf0MI9gAjef4F6GUqaAqQ9QOkBF/9rtoPCH0S2vpfj8flmDxcTgEE1H:d2Yf0MI5x1QOkBFhy40S2
  • TLSH
    T1BD156C16E66400BCE0B7C6B4CE665D43D771B84B03706ADB07D06AA63F277E45A3EB12
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  discoveryspywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery
  behavioral1behavioral2