Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/07/2026, 08:41
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
- Size 30.9MB
- Sample260720-kltheaev41
- SHA256 4dc25a03d45d1fbb31a599feeb5ed12adcbd1d32da4a1700752f87731385ca63
- MD5 d1d9d81ad042056d045c9454f481443c
- SHA1 e896b84045b07e17d2603dbefda21df8ef2498ed
- SHA512 a19c4ff65737b02933eb05e6865b4c52be1cfee4396ffda502333a8de90ef11febc57ce274904d9e2e76b417ddfc5b8329cacac025fa0a2e47439e69d1fca725
- SSDEEP 196608:Q9Ml6vYQ8VvPeb1UBDglPC0Y/OnFt7yO7uq5Evmq07kUM:QB8VvPeb1ADOC0Y/OnFt7yOBEy7kUM
- TLSH T1866796215B4D8745D126BD3CD0874A01D3F5BF88C32E8F1F9BE08CE9669B6427A1EA4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3820 2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe 3820 2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3820 2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3820 2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3820
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\loader.log
- Size 120B
- SHA256 bc6ef7bf938bbe63e1b87909789e8e87e99b439e4c4401e08b9e9b7b346add64
- MD5 7b969ab0fbd95cc3cf04daffadee31dc
- SHA1 460bb9f8a43f7ba1d77af83f11204d04a6ce3928
- SHA512 ab1ee6b8e1882f2f9a12b62052d997c6db4d1b78441f8e2dccfcbce8c979f1a6a7e6c761afdd9045a73d52d8009d6ee1883d85d96b4df61ee464749e33a4e581
- TLSH T159B092A8A58562B8227631209081B6A42F301519A461283993DE2A1A6059BAE23A6082
- MD5 SHA1 SHA512 TLSH