5d871d4f89a5346797488d805c666b30ccefcb4a9039885ec5f2ecfe884e3688

Analysis

max time kernel
150s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 07:41

Target
2026-08-08_d082323b3e0a28db093be00f4324dd9b_akira_cobalt-strike_glassworm_satacom.exe
Size 37.0MB
Sample260808-jh5ktscd52
SHA256 5d871d4f89a5346797488d805c666b30ccefcb4a9039885ec5f2ecfe884e3688
MD5 d082323b3e0a28db093be00f4324dd9b
SHA1 66b7b7cf9c1041b23874df1c2a2b837f13be9f5a
SHA512 b032733b0b7e956aac0bf20836a34ae4f8bfcb87d76b8ed1f4c64b2f34502605df90151d68a794600ca0c38804adae606cd86c9cc8d7157ff768c7fc3204b819
SSDEEP 393216:W5y9GN2MuiM5FWNqfy6+oS+ouFuuxcD2kwIq903DkkGiA:W5yTQGOSuuxcYPOGiA
TLSH
T161877D027B4A696EC05AC47482474672AA7570DF0B35FAFF44C6D9392F6AAF01F38358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1784	2026-08-08_d082323b3e0a28db093be00f4324dd9b_akira_cobalt-strike_glassworm_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-08_d082323b3e0a28db093be00f4324dd9b_akira_cobalt-strike_glassworm_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-08_d082323b3e0a28db093be00f4324dd9b_akira_cobalt-strike_glassworm_satacom.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1784