General
- Target 2026-07-10_5fb4fcac4d29dec7216d18916e045c4f_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 580KB
- Sample260710-3ys2hsat2z
- SHA256 2795d6b3b7d9625652ca44cf60357d43a06abb3a707f7bacf15bf4a87db7499a
- MD5 5fb4fcac4d29dec7216d18916e045c4f
- SHA1 211e897d8f1a3746efe090f7fd210bdae5de56b4
- SHA512 f85953a7421937b4eb6f245249a20fc2e85f193fe01e323503d9b5f4a00d9fe118d2c3320ff506cd39150451a874ac195d70a0e8c4f9aa3b19e514c5e5582f5d
- SSDEEP 12288:uMDIJUBtuydOB3aXfcCWNs0n5SG4SuItwfh5+sH5bFFq1J9Hko:tIAt1deCQs05SG4SuKwp5+mRFD
- TLSH T15BC45C2B669505ECE1B7C178CE475852EB76780603B19AEF07D089A35F771E04F3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-10_5fb4fcac4d29dec7216d18916e045c4f_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_5fb4fcac4d29dec7216d18916e045c4f_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_5fb4fcac4d29dec7216d18916e045c4f_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 580KB
- SHA256 2795d6b3b7d9625652ca44cf60357d43a06abb3a707f7bacf15bf4a87db7499a
- MD5 5fb4fcac4d29dec7216d18916e045c4f
- SHA1 211e897d8f1a3746efe090f7fd210bdae5de56b4
- SHA512 f85953a7421937b4eb6f245249a20fc2e85f193fe01e323503d9b5f4a00d9fe118d2c3320ff506cd39150451a874ac195d70a0e8c4f9aa3b19e514c5e5582f5d
- SSDEEP 12288:uMDIJUBtuydOB3aXfcCWNs0n5SG4SuItwfh5+sH5bFFq1J9Hko:tIAt1deCQs05SG4SuKwp5+mRFD
- TLSH T15BC45C2B669505ECE1B7C178CE475852EB76780603B19AEF07D089A35F771E04F3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Windows security bypass
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Windows security modification