Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 08:41
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
- Size 30.9MB
- Sample260720-kltheaev41
- SHA256 4dc25a03d45d1fbb31a599feeb5ed12adcbd1d32da4a1700752f87731385ca63
- MD5 d1d9d81ad042056d045c9454f481443c
- SHA1 e896b84045b07e17d2603dbefda21df8ef2498ed
- SHA512 a19c4ff65737b02933eb05e6865b4c52be1cfee4396ffda502333a8de90ef11febc57ce274904d9e2e76b417ddfc5b8329cacac025fa0a2e47439e69d1fca725
- SSDEEP 196608:Q9Ml6vYQ8VvPeb1UBDglPC0Y/OnFt7yO7uq5Evmq07kUM:QB8VvPeb1ADOC0Y/OnFt7yOBEy7kUM
- TLSH T1866796215B4D8745D126BD3CD0874A01D3F5BF88C32E8F1F9BE08CE9669B6427A1EA4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4212 2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe 4212 2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4212 2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4212 2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-20_d1d9d81ad042056d045c9454f481443c_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4212
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\loader.log
- Size 120B
- SHA256 c3a102abf5855c4563c626cbe36c371d762c29519842230900aec5002fb3bb54
- MD5 821155972f082fde89c76292bd44bfac
- SHA1 024089a671920da60581e72fc7de6af1b7a2f36b
- SHA512 2c3e909d43496b288cf0ce8aefe86e8cd4300efd167111c52c474c56938c14f05aa312c420237a755fef37084f836fe6a0bc55ca46ff585e14893ef5e3e18c39
- TLSH T14EB012ACE94566F833773521D0C0F2B42B301409A065383893DF362A7055BAF23A7282
- MD5 SHA1 SHA512 TLSH