cfbb52658b64c4b520e9d3d271e4622f464febf295043a0127e34c07c0fec7e1

Analysis

max time kernel
150s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 04:34

Target
2026-07-28_a2fc989dd49357490d42de5bff552507_glassworm_megazord.exe
Size 18.0MB
Sample260728-e7gsvaar9z
SHA256 cfbb52658b64c4b520e9d3d271e4622f464febf295043a0127e34c07c0fec7e1
MD5 a2fc989dd49357490d42de5bff552507
SHA1 ee507a2cc8f6a730fd275a3569b1cb80d9776296
SHA512 ac34aaf247072980a68820ca8df21e5c1575d8d1f355e0145cf7d7de14b3693dc5ead88d99a56751192eccc8b7045b764ac84c79f2f27178d686852bd25571ee
SSDEEP 196608:U6akMtDx9Z2Y57VKWIvBGL0iDQG7NbL9hIZqsPLR9WIj:Uj/9zVIML01cL9hIZ7LR95
TLSH
T1A2179D11E3EC0199E67EC17CC6634617EBB2B895132097DB0564AA592F33BD0BE7E321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4948 wrote to memory of 5200	4948	2026-07-28_a2fc989dd49357490d42de5bff552507_glassworm_megazord.exe	90

C:\Users\Admin\AppData\Local\Temp\2026-07-28_a2fc989dd49357490d42de5bff552507_glassworm_megazord.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-28_a2fc989dd49357490d42de5bff552507_glassworm_megazord.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4948
- C:\Windows\SYSTEM32\fsutil.exe
  "fsutil" usn queryjournal C:
  2⤵
  PID:5200