General
- Target 2026-07-10_731cd27170dd65a0241514b788cb6bbc_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 580KB
- Sample260710-3xp88sfy2k
- SHA256 dd835b1f15e75a1362ce1ce07cef7a7439e136c207a7377d3987eff211801ebb
- MD5 731cd27170dd65a0241514b788cb6bbc
- SHA1 a6ab548ee9ef610163cbedaff5f7b26ed8dd63d6
- SHA512 a2e56edf74961821d8095348e2a685d20beacbe36b1d54b298a49c7630a9d46d620bea9eff72751e058c7184c0e8ff17d0338b66f8ecd7a760afd977d6d087d4
- SSDEEP 12288:qMDIJUBtuydOB3aXfcCWNs0n5SG4SuItwfh5+sH5bFFq1J7Hko:5IAt1deCQs05SG4SuKwp5+mRFl
- TLSH T1ABC45C2B669505ECE1B7C178CE475852EB36780607B19AEF07D089A35F771E04F3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-10_731cd27170dd65a0241514b788cb6bbc_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_731cd27170dd65a0241514b788cb6bbc_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_731cd27170dd65a0241514b788cb6bbc_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 580KB
- SHA256 dd835b1f15e75a1362ce1ce07cef7a7439e136c207a7377d3987eff211801ebb
- MD5 731cd27170dd65a0241514b788cb6bbc
- SHA1 a6ab548ee9ef610163cbedaff5f7b26ed8dd63d6
- SHA512 a2e56edf74961821d8095348e2a685d20beacbe36b1d54b298a49c7630a9d46d620bea9eff72751e058c7184c0e8ff17d0338b66f8ecd7a760afd977d6d087d4
- SSDEEP 12288:qMDIJUBtuydOB3aXfcCWNs0n5SG4SuItwfh5+sH5bFFq1J7Hko:5IAt1deCQs05SG4SuKwp5+mRFl
- TLSH T1ABC45C2B669505ECE1B7C178CE475852EB36780607B19AEF07D089A35F771E04F3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Windows security bypass
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Windows security modification