General

  • Target
    2026-09-10_3f1c6c891bfd5838d1c253af0e6d47c7_cobalt-strike_coinminer_ghostlocker_glassworm_luca-stealer
  • Size 21.2MB
  • Sample260910-wcllzstbmb
  • SHA256 f575d3d7cc87762edf67c8ebb159e9c0273df29c296d80100b7e74700843ea0d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-10_3f1c6c891bfd5838d1c253af0e6d47c7_cobalt-strike_coinminer_ghostlocker_glassworm_luca-stealer
    • Size 21.2MB
    • SHA256 f575d3d7cc87762edf67c8ebb159e9c0273df29c296d80100b7e74700843ea0d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • An open source browser data exporter written in golang.

    • Family: HackBrowserData

      An open source golang web browser extractor.

    • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks