8dd5bb5095ea138dfb08953a2c6031e51f656cf049c43b293c0ad71d8813816f

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 21:30

Target
2026-07-20_15dd4f32e29db8937c285040bbb4e6a1_akira_cobalt-strike_glassworm.exe
Size 1.9MB
Sample260720-1ce7ese17l
SHA256 8dd5bb5095ea138dfb08953a2c6031e51f656cf049c43b293c0ad71d8813816f
MD5 15dd4f32e29db8937c285040bbb4e6a1
SHA1 ec84b3e3a6a9c1b779ec4220bf2805f2365df635
SHA512 d215defaa09572041d80f33e78308917613cb1df404c2a4d73265f2702ecfc4eacbbb9bee1c171aa8275fe274fe25692083139db2f49b788273328165c12f2b0
SSDEEP 24576:IYY0J5KcgvvgRRkwbFuSXZ57+bDIPfGkhds:XY0PKjvgRRToSp5qbDIPfGkhd
TLSH
T14E954B03E29140ECC7AAC1B583566733FE76B84D4E27B69B4BEC4B212E25F506B2D315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3576	2026-07-20_15dd4f32e29db8937c285040bbb4e6a1_akira_cobalt-strike_glassworm.exe
3576	2026-07-20_15dd4f32e29db8937c285040bbb4e6a1_akira_cobalt-strike_glassworm.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-20_15dd4f32e29db8937c285040bbb4e6a1_akira_cobalt-strike_glassworm.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-20_15dd4f32e29db8937c285040bbb4e6a1_akira_cobalt-strike_glassworm.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3576