General
- Target 2026-07-11_81436be890a706692619cfd4999953c6_akira_cobalt-strike_elex_glassworm_swisyn
- Size 398KB
- Sample260711-tfbvvaev9l
- SHA256 a5bcae368ec64048d1de66c075247219953cabe9e75955a4b0f0a2f01c40d2ec
- MD5 81436be890a706692619cfd4999953c6
- SHA1 246200ff2e97554e37cfd2dbfb073fb3d6ba0ca1
- SHA512 96bfc9e2acffbc38f08a9662cacd444da1a1ef89d2b82cc7cd9705eda66dc0b8ee67bce6b5d25301f42a0aa6962fbdd2b5c74b231fc7c54bd881389ee2317ba4
- SSDEEP 6144:UsLqdufVUNDapjFahjTUSkU6VhyAjjFzrSEBZ1jYqGFKkyp:PFUNDapjwjTUSzKAA9zrSENcTg
- TLSH T19D847E13FE1150BEE89BC8F55A13E526BE627C190760FCDB2794AF102E72AC27674706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_81436be890a706692619cfd4999953c6_akira_cobalt-strike_elex_glassworm_swisyn.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_81436be890a706692619cfd4999953c6_akira_cobalt-strike_elex_glassworm_swisyn.exe
Resource
win11ltsc2024-20260709-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_81436be890a706692619cfd4999953c6_akira_cobalt-strike_elex_glassworm_swisyn
- Size 398KB
- SHA256 a5bcae368ec64048d1de66c075247219953cabe9e75955a4b0f0a2f01c40d2ec
- MD5 81436be890a706692619cfd4999953c6
- SHA1 246200ff2e97554e37cfd2dbfb073fb3d6ba0ca1
- SHA512 96bfc9e2acffbc38f08a9662cacd444da1a1ef89d2b82cc7cd9705eda66dc0b8ee67bce6b5d25301f42a0aa6962fbdd2b5c74b231fc7c54bd881389ee2317ba4
- SSDEEP 6144:UsLqdufVUNDapjFahjTUSkU6VhyAjjFzrSEBZ1jYqGFKkyp:PFUNDapjwjTUSzKAA9zrSENcTg
- TLSH T19D847E13FE1150BEE89BC8F55A13E526BE627C190760FCDB2794AF102E72AC27674706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2