Analysis
- max time kernel
149s - max time network
101s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
13/03/2026, 03:27
General
- Target 2026-03-13_6b2f33ef8b5029d8ad9e57c2fdfa044a_akira_alphv_blackcat_elex_glassworm.exe
- Size 2.9MB
- Sample260313-dz1ejsa17p
- SHA256 e8416e3b3cd9e2b68a64fa72f2e9e4e71516ab40d8d14fe3bc8c94cff4abf5b8
Score
10/10
Malware Config
Signatures
- BlackCat
A Rust-based ransomware sold as RaaS first seen in late 2021.
- Blackcat family
- Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
- Detects command variations typically used by ransomware 1 IoCs
- Detects executables containing commands for clearing Windows Event Logs 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-03-13_6b2f33ef8b5029d8ad9e57c2fdfa044a_akira_alphv_blackcat_elex_glassworm.exe"C:\Users\Admin\AppData\Local\Temp\2026-03-13_6b2f33ef8b5029d8ad9e57c2fdfa044a_akira_alphv_blackcat_elex_glassworm.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4436-1-0x00000000031C0000-0x0000000003224000-memory.dmp
memory/4436-0-0x0000000000840000-0x0000000000B36000-memory.dmp