1e5c1518de741b262a93e14f074d5141d5de343caba6be58d7886b1b161622b4

Analysis

max time kernel
150s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 02:01

Target
2026-08-03_fd05e8b95fbd8cd084db42719167ed74_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe
Size 5.4MB
Sample260803-cfpm9swdnf
SHA256 1e5c1518de741b262a93e14f074d5141d5de343caba6be58d7886b1b161622b4
MD5 fd05e8b95fbd8cd084db42719167ed74
SHA1 3c2aa70f40ea7f649d8ce2724cc5dc38dc4d6257
SHA512 f917f1afcb5c9ce41a64d095a1d1d0e888db03ff07355f572c686762037bd8bd5a491da51f27d1dbdd88ee9aa98218944c37b88b47f27d301541e4192e2e35d2
SSDEEP 98304:I/w4y7rl55HrJmqqJAWTbiN6Hh2iOspI8r:I/o51HWTbO6Hh2hsOU
TLSH
T1A5469D6133C100D2E01BE1B60A97A952B1B67889037072D7F6C56A5EAF779E10EF72C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
476	2026-08-03_fd05e8b95fbd8cd084db42719167ed74_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_fd05e8b95fbd8cd084db42719167ed74_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_fd05e8b95fbd8cd084db42719167ed74_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:476