28a070790e38672b7166f6900cd93718cbc0b379ec7903ffabf1253549098fe7

Analysis

max time kernel
150s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 02:35

Target
2026-08-10_580e532ef4baea2f91ec6ae60b318e3c_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe
Size 5.3MB
Sample260810-c3d52shn91
SHA256 28a070790e38672b7166f6900cd93718cbc0b379ec7903ffabf1253549098fe7
MD5 580e532ef4baea2f91ec6ae60b318e3c
SHA1 70d1f362153acaaec9f6330b3a2c0946bb342f99
SHA512 7b0b1ef75dc233c25d993ea3dc23d6c1d167f9a1579ed03b4fd9915252e47f789273dadee15477131c5d194352519705682c664ac27fa1919ed6a3e86944f3be
SSDEEP 98304:SY8tTBnwuziq5HrJmqqJkptbF9P0v3LF/Aa:SXN2W517ptbF9P0vbF7
TLSH
T10646AEA2B2D140D5E017E1FA4A677887B27374890370B1C7E684AA5A6F734A50DF73CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
764	2026-08-10_580e532ef4baea2f91ec6ae60b318e3c_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_580e532ef4baea2f91ec6ae60b318e3c_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_580e532ef4baea2f91ec6ae60b318e3c_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:764