5bd52c4e400d92cddc4ee8cd631dede20e971262216777e6a92b94db9ed48adc

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 03:51

Target
2026-08-01_052aebe0494486da617beebda51057e6_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Size 3.6MB
Sample260801-eeta6sdq4w
SHA256 5bd52c4e400d92cddc4ee8cd631dede20e971262216777e6a92b94db9ed48adc
MD5 052aebe0494486da617beebda51057e6
SHA1 1a238371200aaee691d912aa4ad0153e4cca09b3
SHA512 2e8392df60ad7daf30bd002adb7882f602c98d90ac2998b4d7c7d6bd4877d5211912db9945d0b7ff2e36270cf30303b07dc7e12cd3d68b80fe5155499c54af69
SSDEEP 49152:+3OWB30DsCzh5b3spWzwaNMLLSKFRcKxOfwgczqZyWSEEuhmh5:+0D3zhGta6UKIEruhmj
TLSH
T1C3062892E76112D9C025C5F4832A6333BB62F99D433836FB1E9057326EA4EE05E7CB15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

defense_evasion

Modifies Control Panel 2 IoCs

defense_evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000\Control Panel\Desktop\FontSmoothing = "2"	2026-08-01_052aebe0494486da617beebda51057e6_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000\Control Panel\Desktop\FontSmoothingType = "2"	2026-08-01_052aebe0494486da617beebda51057e6_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-01_052aebe0494486da617beebda51057e6_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-01_052aebe0494486da617beebda51057e6_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe"
1⤵
- Modifies Control Panel
PID:4588