Overview

overview

10

Static

static

10

2026-08-18...uk.exe

windows10-2004-x64

8

Resubmissions

27/10/2026, 09:10

261027-k49mcasyct10

18/08/2026, 02:32

260818-c1qq3avand8

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-18_1863621788b2d33bd5b4a87e62aab997_akira_glassworm_icedid_megazord_rusty-stealer_ryuk
  • Size 3.8MB
  • Sample261027-k49mcasyct
  • SHA256 636772caab9fcb9ba4c4e839fb169768462d992a07ff32ad7cf2055170f829dc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
needle_stealer777discoveryexecutionpersistencespywarestealer

Malware Config

Extracted

Family

  • needle_stealer

Botnet

  • 777

C2

  • http://87.120.104.147:8080

Attributes
  • agent_enabled

    true

  • api_key

    2570969028d66df9fea824c47fd111c4041f1338aab7d46a3c0dcb0721fe90f6

  • auto_install

    true

  • debug_log

    false

  • pin_extension

    false

  • proxy_enabled

    false

Targets

    • Target
      2026-08-18_1863621788b2d33bd5b4a87e62aab997_akira_glassworm_icedid_megazord_rusty-stealer_ryuk
    • Size 3.8MB
    • SHA256 636772caab9fcb9ba4c4e839fb169768462d992a07ff32ad7cf2055170f829dc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecutionpersistencespywarestealer

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks