1ec49815a680f047382666538f3a7c0ac554c3c27cde4373b226fda9c8c1c33a

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 17:16

Target
2026-07-22_abc5e31b9a80abb5ef1db5cbdd97ec6a_akira_cobalt-strike_glassworm_rusty-stealer.exe
Size 3.6MB
Sample260722-vs87jszcrb
SHA256 1ec49815a680f047382666538f3a7c0ac554c3c27cde4373b226fda9c8c1c33a
MD5 abc5e31b9a80abb5ef1db5cbdd97ec6a
SHA1 e95acba7da000be08735043a6cc4904fe81f2dd5
SHA512 bdcbe383e6edb16701fbc6717d9888b8109887d32cdb835ed71588de82211b2d00f18cf28313adbc67e812f8fd01488130244cef132c6b4b2cfd4a7b23d3dec7
SSDEEP 49152:Tky4x0qUc5YGmwSyYo2jlTKpFhJVUmwlEpTrS25LhmWT9:Tky406hl2uxvwlEpqaLhmWh
TLSH
T1DF061912EB2151F9C025C0BA83266723F775FD9D033236EB4E9047396E66EE05E78B19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

defense_evasion

Modifies Control Panel 2 IoCs

defense_evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000\Control Panel\Desktop\FontSmoothing = "2"	2026-07-22_abc5e31b9a80abb5ef1db5cbdd97ec6a_akira_cobalt-strike_glassworm_rusty-stealer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000\Control Panel\Desktop\FontSmoothingType = "2"	2026-07-22_abc5e31b9a80abb5ef1db5cbdd97ec6a_akira_cobalt-strike_glassworm_rusty-stealer.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-22_abc5e31b9a80abb5ef1db5cbdd97ec6a_akira_cobalt-strike_glassworm_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-22_abc5e31b9a80abb5ef1db5cbdd97ec6a_akira_cobalt-strike_glassworm_rusty-stealer.exe"
1⤵
- Modifies Control Panel
PID:2904