Analysis
- max time kernel
150s - max time network
112s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/07/2026, 09:47
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_2f76cc894adb832082ffb077a2706120_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_2f76cc894adb832082ffb077a2706120_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-07-12_2f76cc894adb832082ffb077a2706120_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
- Size 30.9MB
- Sample260712-lsfessfy9q
- SHA256 c64849c979343e4bfed0cba7108698fa1254a7461c07e8ac174ed354e86a1df0
- MD5 2f76cc894adb832082ffb077a2706120
- SHA1 d2614f9abb0044ad9c81bf32740244b68e4bc6f1
- SHA512 7e9854ce79212e2edc4e0b71ad5995d34ee922c6207e9929e2007f9632c727cad1210a1f1f6b451a74495bdc9e67dd9e2fcca0d6cf079787a14ed4f1241e19fa
- SSDEEP 196608:Q9Ml6vYQ8VvPeb1UBDglPC0Y/OnFt7yO7uq5EvMq07kUM:QB8VvPeb1ADOC0Y/OnFt7yOBEA7kUM
- TLSH T1E76796215B4D8745D126BD3CD0874A01D3F5BF88C32E8F1F9BE08CE9669B6427A1EA4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2264 2026-07-12_2f76cc894adb832082ffb077a2706120_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2264 2026-07-12_2f76cc894adb832082ffb077a2706120_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2264 2026-07-12_2f76cc894adb832082ffb077a2706120_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-12_2f76cc894adb832082ffb077a2706120_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-12_2f76cc894adb832082ffb077a2706120_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2264
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\loader.log
- Size 120B
- SHA256 3bce653ccb327820a21901f4f4280cc6a330a579199ea41437471b5869efb148
- MD5 668897dc549ac97729d3ea1ae1a837bd
- SHA1 85a7b07d9ff85a9d709fc14fa89d6a132e4d9c01
- SHA512 979ee5c8c08598353a90a6c436afbacdc532e534f5d41f35e67804de1e102215d4b5ddefb6163ca0bb49eb23d3772bc73d885cb6a82c7fe16db943da7a6f057c
- TLSH T1D0B012A8E44562F932733260D4C0F2B42B301419E0623C3893DE3B1A6075BAF2367082
- MD5 SHA1 SHA512 TLSH