Analysis
- max time kernel
150s - max time network
20s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/06/2026, 04:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe
Resource
win11ltsc2024-20260618-en
3 signatures
150 seconds
General
- Target 2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe
- Size 30.8MB
- Sample260629-e7ch5aet7j
- SHA256 c192c099dd7a625d3268a70f0b58c10c4c21cac1057993478a9a28cc85548c87
- MD5 9e55cc6e51e811657cfb1e2ffb486fed
- SHA1 48ca11623f37fdc2edff15969a11e4323e7ce733
- SHA512 912d9b968f225b469019ddac87d2829447644dfd80ee04477def3831b1d33ad22450b3495469b97a112890ba6f5cabee616aa1df7509cbf97804e06f6397e816
- SSDEEP 393216:F3tn+YVhxde9pYySL8y3q341sGn0TpoPLDanykNkOPdfulrkAIDvWvGCKd+7rqN3:P+Ihps+0toPXanyGhdfusDvWOzd+
- TLSH T1B367AE8363983DCBC061677C4501816DF2EBF82C9B64C3F6AAC7FD1A4AAB4910D45BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 2 IoCs
pid Process 3656 2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe 3656 2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe - NTFS ADS 2 IoCs
description ioc Process File opened for modification C:\Users\Admin\AppData\Local\Temp\2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe:database 2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe File opened for modification C:\Users\Admin\AppData\Local\Temp\2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe:database-journal 2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3656 2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe"1⤵
- Deletes itself
- NTFS ADS
- Suspicious use of SetWindowsHookEx
PID:3656
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe
- Path C:\Users\Admin\AppData\Local\Temp\2026-06-27_9e55cc6e51e811657cfb1e2ffb486fed_akira_blankgrabber_cobalt-strike_gazer_glassworm_helldow.exe
- Size 30.8MB
- SHA256 c192c099dd7a625d3268a70f0b58c10c4c21cac1057993478a9a28cc85548c87
- MD5 9e55cc6e51e811657cfb1e2ffb486fed
- SHA1 48ca11623f37fdc2edff15969a11e4323e7ce733
- SHA512 912d9b968f225b469019ddac87d2829447644dfd80ee04477def3831b1d33ad22450b3495469b97a112890ba6f5cabee616aa1df7509cbf97804e06f6397e816
- SSDEEP 393216:F3tn+YVhxde9pYySL8y3q341sGn0TpoPLDanykNkOPdfulrkAIDvWvGCKd+7rqN3:P+Ihps+0toPXanyGhdfusDvWOzd+
- TLSH T1B367AE8363983DCBC061677C4501816DF2EBF82C9B64C3F6AAC7FD1A4AAB4910D45BB5
- MD5 SHA1 SHA512 SSDEEP TLSH