General
- Target 2026-07-10_8ce64194f3c81bf2acacef0351b7a4d6_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 581KB
- Sample260710-2adq9ae18v
- SHA256 7e89430b42c500432d3d6367caf51305476ddb1c4d1eadce8f363778830badae
- MD5 8ce64194f3c81bf2acacef0351b7a4d6
- SHA1 3209adcdb76a1d55573da3ecc1ca6bb98691c1ef
- SHA512 c5028d37253de89c373eed28f7cfa739da79e48290bb1b50221284ce4697810b4b353c5097681f264e16d6fe0c7651d160d23331a834df01c9c9457f93b752d2
- SSDEEP 12288:tMDIJUBtuydOB3aXfcCWNs0n5SG4SuItwfh5+sH5bFFq1JTo:iIAt1deCQs05SG4SuKwp5+mRFq
- TLSH T11BC46C2B66942578F1B7C178CF865942F776780603A4B9EF07D089A21F775F04B3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-10_8ce64194f3c81bf2acacef0351b7a4d6_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_8ce64194f3c81bf2acacef0351b7a4d6_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_8ce64194f3c81bf2acacef0351b7a4d6_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 581KB
- SHA256 7e89430b42c500432d3d6367caf51305476ddb1c4d1eadce8f363778830badae
- MD5 8ce64194f3c81bf2acacef0351b7a4d6
- SHA1 3209adcdb76a1d55573da3ecc1ca6bb98691c1ef
- SHA512 c5028d37253de89c373eed28f7cfa739da79e48290bb1b50221284ce4697810b4b353c5097681f264e16d6fe0c7651d160d23331a834df01c9c9457f93b752d2
- SSDEEP 12288:tMDIJUBtuydOB3aXfcCWNs0n5SG4SuItwfh5+sH5bFFq1JTo:iIAt1deCQs05SG4SuKwp5+mRFq
- TLSH T11BC46C2B66942578F1B7C178CF865942F776780603A4B9EF07D089A21F775F04B3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Windows security bypass
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Windows security modification