Analysis
- max time kernel
150s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
03/07/2026, 02:59
General
- Target 2026-07-03_64c88f3a8d6855107c9ef1c033f2fd1f_akira_blankgrabber_cobalt-strike_glassworm_icedid_luca-s.exe
- Size 79.1MB
- Sample260703-dg33qaaw91
- SHA256 391f6d3aedc32094dc9a77575dbcc38e38c9871b6e64efc7939a9d58cf6774bf
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-03_64c88f3a8d6855107c9ef1c033f2fd1f_akira_blankgrabber_cobalt-strike_glassworm_icedid_luca-s.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-03_64c88f3a8d6855107c9ef1c033f2fd1f_akira_blankgrabber_cobalt-strike_glassworm_icedid_luca-s.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"2⤵
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
nr_9288e092996373d7.node
memory/5288-4-0x000002B5927E0000-0x000002B5927E1000-memory.dmp
memory/5288-5-0x000002B5927F0000-0x000002B5927F1000-memory.dmp
memory/5288-11-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-26-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-25-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-24-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-23-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-22-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-21-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-20-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-17-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-18-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-16-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-27-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-28-0x0000000180000000-0x0000000180169000-memory.dmp
memory/5288-19-0x0000000180000000-0x0000000180169000-memory.dmp