3341d77985a539f710956a5e3f35d17675d07f557aa394f3089f66ffee8190f4

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 02:42

Target
2026-08-09_ca40e27446cdb17b6b717e11c85d537f_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe
Size 5.3MB
Sample260809-c7fvfagm6x
SHA256 3341d77985a539f710956a5e3f35d17675d07f557aa394f3089f66ffee8190f4
MD5 ca40e27446cdb17b6b717e11c85d537f
SHA1 68b76d906310ca4e9006ff717a363301e8aa6606
SHA512 3e238fda709ad42dd9d86f5f13d8e5dde44f6ca7e866c4d6c99cab0ceb6e2c69a7658603d8fde393e96cefbd7e38d001f7b32141e30080716ca521222968667a
SSDEEP 49152:4Ih0wnXAxH0aA1UJ7yiTwJ2uhY0xM916uLPX7ocJnE3PMC05HryFrSXjqqqJ1Hh2:/ZFRMBj5HrJmqqJ1B3EkGH4J0h/Aa
TLSH
T19B469C6172C140E9E01BE1B65967B842B172788A0771B2CBE6C4A95B9F374B10DF73CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2104	2026-08-09_ca40e27446cdb17b6b717e11c85d537f_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-09_ca40e27446cdb17b6b717e11c85d537f_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-09_ca40e27446cdb17b6b717e11c85d537f_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2104