General
- Target 2026-07-24_115c4f0e802bf29b39d4f6e2f1bb6909_akira_cobalt-strike_elex_glassworm_swisyn
- Size 14.7MB
- Sample260724-lnbwtabp7w
- SHA256 b06691e70bf7d1df89e161db36c4ecfb5df4c92188c2b82af7b42daf90ca2cf9
- MD5 115c4f0e802bf29b39d4f6e2f1bb6909
- SHA1 0b1714b6b9354d2f7f31d619575e6c0110f55257
- SHA512 5330da033580801434f5ebaf868551ba4ca126fc03ae759b59bed48524cf06904debf2a714fa23570f4f2ddd525292aba6edf8e14179d1bc3da03ca0fef69398
- SSDEEP 196608:MZyI32RwvANmGG6FbgpA0qfjLkhlZCq3gC0a:M7m2055gpAbPKgC0a
- TLSH T121F66C17F35260EDC46AC178934BA632F671784C47347DEB5BA48B262E61AE02F3DB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-24_115c4f0e802bf29b39d4f6e2f1bb6909_akira_cobalt-strike_elex_glassworm_swisyn.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_115c4f0e802bf29b39d4f6e2f1bb6909_akira_cobalt-strike_elex_glassworm_swisyn.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_115c4f0e802bf29b39d4f6e2f1bb6909_akira_cobalt-strike_elex_glassworm_swisyn
- Size 14.7MB
- SHA256 b06691e70bf7d1df89e161db36c4ecfb5df4c92188c2b82af7b42daf90ca2cf9
- MD5 115c4f0e802bf29b39d4f6e2f1bb6909
- SHA1 0b1714b6b9354d2f7f31d619575e6c0110f55257
- SHA512 5330da033580801434f5ebaf868551ba4ca126fc03ae759b59bed48524cf06904debf2a714fa23570f4f2ddd525292aba6edf8e14179d1bc3da03ca0fef69398
- SSDEEP 196608:MZyI32RwvANmGG6FbgpA0qfjLkhlZCq3gC0a:M7m2055gpAbPKgC0a
- TLSH T121F66C17F35260EDC46AC178934BA632F671784C47347DEB5BA48B262E61AE02F3DB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Detects executables containing URLs to raw contents of a Github gist
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory