General
- Target 2026-07-11_b13c5a28695f4997c780c43357638f54_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 579KB
- Sample260711-mpql2ags6j
- SHA256 7be016472fd1c64cd6d6ec831f3fb0452afb38d45f4d3f1b9925963f6e4d38ff
- MD5 b13c5a28695f4997c780c43357638f54
- SHA1 4e5a156a643c6770d113297b42dc9f983f923a6d
- SHA512 19ca6f4f695baeaad8633662e0d603cf0e5ef778d84b1bd2b37ede7700543f109c5c166ef06d29e773516bf601ba53c2b663c96e786b434e9981a08a5e7c72e0
- SSDEEP 12288:jMDIJUBtuydOB3aXfcCWNs0n5SG4SuItwfh5+sH5bFFq1JZo:8IAt1deCQs05SG4SuKwp5+mRFQ
- TLSH T19FC47D2796A4257DE1B7C278CF475822E776780643B099FF07D099A21F7B1E04B3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-11_b13c5a28695f4997c780c43357638f54_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_b13c5a28695f4997c780c43357638f54_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_b13c5a28695f4997c780c43357638f54_anydesk_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc
- Size 579KB
- SHA256 7be016472fd1c64cd6d6ec831f3fb0452afb38d45f4d3f1b9925963f6e4d38ff
- MD5 b13c5a28695f4997c780c43357638f54
- SHA1 4e5a156a643c6770d113297b42dc9f983f923a6d
- SHA512 19ca6f4f695baeaad8633662e0d603cf0e5ef778d84b1bd2b37ede7700543f109c5c166ef06d29e773516bf601ba53c2b663c96e786b434e9981a08a5e7c72e0
- SSDEEP 12288:jMDIJUBtuydOB3aXfcCWNs0n5SG4SuItwfh5+sH5bFFq1JZo:8IAt1deCQs05SG4SuKwp5+mRFQ
- TLSH T19FC47D2796A4257DE1B7C278CF475822E776780643B099FF07D099A21F7B1E04B3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen