6622ac9577c58b0fc22b50a8aac7e139f5131e2ef7157d0b1c298d2d6a25b32a

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 04:50

Target
2026-08-10_5baa0a3d6dfe7fc122766410c03881fa_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe
Size 5.3MB
Sample260810-fgfnjaeb65
SHA256 6622ac9577c58b0fc22b50a8aac7e139f5131e2ef7157d0b1c298d2d6a25b32a
MD5 5baa0a3d6dfe7fc122766410c03881fa
SHA1 7aaa3a8f57596f1d8c3177d2d3248e6c8ef20267
SHA512 13e0908473cd28aac5e70c551ee53fbbdfec16f7a5dc795d57c21db9403e92f5a0cc6c761b866d8f3f22f35536e4e41668bee8816b3c906c1b52564d0ebd84e3
SSDEEP 98304:tY8tTBnwuziq5HrJmqqJ/ptbF9P0v3LF/Aa:tXN2W51cptbF9P0vbF7
TLSH
T11B46AEA2B2D140D5E017E1FA4A677887B27374890370B1C7E684AA5A6F734A50DF73CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4484	2026-08-10_5baa0a3d6dfe7fc122766410c03881fa_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_5baa0a3d6dfe7fc122766410c03881fa_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_5baa0a3d6dfe7fc122766410c03881fa_cobalt-strike_gazer_glassworm_helldown_remcos_satacom.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4484