Extracted

Extracted

• • Target
    2026-09-11_0686784c74743de79c7b2fa4b52c1f33_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar_zxxz
  • Size 62.1MB
  • SHA256 ca0296dce45a22874bb7e5b564418261373a9a040fd94d044533dfef55da1618
  • MD5 0686784c74743de79c7b2fa4b52c1f33
  • SHA1 f6c328418c9cbbf68870787c11279c73cf06d0ef
  • SHA512 a27b50e6cbc0848385650cea722a8c9b5bdfd93480fad8ac5732220c3313302c0d6d5ea2d356c68c5be0136dbdf6b39df07cd829163343391b8da91cf228418f
  • SSDEEP 786432:DMguj8Q4VfvrqFTrYYmMU73H0OIL1ol3VcJOsUbgkdmR:DiAQIHrkHMXk1ofc5N
  • TLSH
    T1FEE7CF1773E60095E9B7D2388AA65507D773B8634331CBDF329D06152FABAD09A7E320
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  overlordpersistencerat

  • Detects Overlord RAT

  • Family: Overlord

    Overlord is an open-source Windows RAT written in Golang.

    ratoverlord

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers

  • Executes dropped EXE

  • Loads dropped DLL

  • Registers new Windows logon scripts automatically executed at logon.

    persistence
  behavioral1behavioral2