9efa9181e50e57f099dfcd2c81ed742fc00b1dae15fd15c9bc560ea5a8dfb6cc

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 07:30

Target
2026-07-18_7955738ba5cab3cedc2d795bb3c99a7c_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe
Size 5.4MB
Sample260718-jb4d7act2k
SHA256 9efa9181e50e57f099dfcd2c81ed742fc00b1dae15fd15c9bc560ea5a8dfb6cc
MD5 7955738ba5cab3cedc2d795bb3c99a7c
SHA1 cc52328610336e141813911ba0bae9e75e2afa32
SHA512 0106823970a42ab7051c09a225c1864c96275d5237e513bc2c30488072fc947e9536baa21380b410c271c7e1b149307c929bb33d71548de4e02969f6a427ed07
SSDEEP 98304:gT706zthdyKL5HrJmqqJmNMCc06v/OspI8:8wKv51dmCc06vWsO
TLSH
T19B469DA133C100D1F017E1B60F97A942B1B6788A437062D7F6C56A5A6FB79A10EF72C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2932	2026-07-18_7955738ba5cab3cedc2d795bb3c99a7c_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-18_7955738ba5cab3cedc2d795bb3c99a7c_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-18_7955738ba5cab3cedc2d795bb3c99a7c_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2932