ee87bac2340f4d1ff529e43a75d497a0a6f0a3945c82f21a367de203c94275e3 | Triage™

Login
Reports

Overview

overview

Static

static

2026-07-09...lc.exe

windows10-2004-x64

2026-07-09...lc.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-09_e72bea7b6589b394d2ece8e16af4a724_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
Size 551KB
Sample260709-b7beaabv4l
SHA256 ee87bac2340f4d1ff529e43a75d497a0a6f0a3945c82f21a367de203c94275e3
MD5 e72bea7b6589b394d2ece8e16af4a724
SHA1 b92526fcc49e89dfefb61a4681cdf287a10e7e92
SHA512 a6731e898ee9a9fde072c6f806e15c525a709b348759be00e82125b088084504652cff5b8a4b1c436687175b05d70491e702e9ce6b5f4d5d7d042aae4a52c198
SSDEEP 6144:wGdKnwV1ekLXX/f4RT7yNGKURbJeQ2Kwh2/ivT+MdbWI1tfMQO2G9jERyn8NIiJ8:hKwmkuT7yNGKaFwwDMdbCtdYIXMo05
TLSH
T19AC45D6B569502ECE1B7C178CE464802FB76784A03A16DEF07D089B35E675E09F3BB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion evasion trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

2026-07-09_e72bea7b6589b394d2ece8e16af4a724_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

defense_evasion evasion trojan

Behavioral task

behavioral2

Sample

2026-07-09_e72bea7b6589b394d2ece8e16af4a724_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

defense_evasion evasion trojan

Malware Config

Targets

- Target
  2026-07-09_e72bea7b6589b394d2ece8e16af4a724_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 551KB
- SHA256 ee87bac2340f4d1ff529e43a75d497a0a6f0a3945c82f21a367de203c94275e3
- MD5 e72bea7b6589b394d2ece8e16af4a724
- SHA1 b92526fcc49e89dfefb61a4681cdf287a10e7e92
- SHA512 a6731e898ee9a9fde072c6f806e15c525a709b348759be00e82125b088084504652cff5b8a4b1c436687175b05d70491e702e9ce6b5f4d5d7d042aae4a52c198
- SSDEEP 6144:wGdKnwV1ekLXX/f4RT7yNGKURbJeQ2Kwh2/ivT+MdbWI1tfMQO2G9jERyn8NIiJ8:hKwmkuT7yNGKaFwwDMdbCtdYIXMo05
- TLSH
  T19AC45D6B569502ECE1B7C178CE464802FB76784A03A16DEF07D089B35E675E09F3BB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion evasion trojan
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- Modifies Windows Defender Real-time Protection settings
  defense_evasion trojan
- Windows security bypass
  defense_evasion trojan
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Windows security modification
  defense_evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionevasiontrojan

behavioral2

defense_evasionevasiontrojan

© 2018-2026

Terms | Privacy