Extracted

• • Target
    2026-08-28_83d5a0e39b592a6667cd017a36a3a824_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc
  • Size 883KB
  • SHA256 3cd8bb6f5be583d057f449e11b19100c97469d43525dc41c8aeb81784b145933
  • MD5 83d5a0e39b592a6667cd017a36a3a824
  • SHA1 b7ab0e50e27cb5bd222b859b402058a8c57da374
  • SHA512 4fa72ebd0c257f379ba96feace61be32d7aebff9c43eed06477795eff0088cb18bae0fc3f0c448e99a2097783dc223639e4cd206bd578ca0ef870f9747cfffa8
  • SSDEEP 12288:pDTNUNcytUf00IMoAjefYFvfYyMAqQ9QOkBF/9rtoPCH022vpfj8flmDxcTgEE1U:R2If00IcXLQOkBFhy4022
  • TLSH
    T1B2156C16E66400BCE0B7C6B4CE665D43D771B84B03706ADB07D06AA63F277E45A3EB12
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  discoveryspywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery
  behavioral1behavioral2