Analysis
- max time kernel
148s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/08/2026, 13:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_6b04ccc2c28a70387eb7ebeb5f702ad6_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_6b04ccc2c28a70387eb7ebeb5f702ad6_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-19_6b04ccc2c28a70387eb7ebeb5f702ad6_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
- Size 10.5MB
- Sample260819-qlayysbp2x
- SHA256 54aee89dea1b3c60188499952020d4e7fa551ebf563fea7f354f313aa46db540
- MD5 6b04ccc2c28a70387eb7ebeb5f702ad6
- SHA1 b808efb5582795818528a0a63ec3c73d838c0e6d
- SHA512 1bfbfdc593114adb060624c82ce2ffdb3e01dfae63e12476b578c7a993310578fa3b7124baa65d8005caf1399432322a178a731b7d95a6b93445c0a18c1b9911
- SSDEEP 98304:qmRUcfT1611PFZzY8zWDaDHiQ8QThojbCFk/fUqrOiOc53CFk/fUqrOiOc5VtK:mckPhR1F+CiKF+CiN8
- TLSH T1D9B63B1EE3E84098E17B9578CB518506F673F8418771968F22D4872E1F77BE24EBA312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-19_6b04ccc2c28a70387eb7ebeb5f702ad6_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-19_6b04ccc2c28a70387eb7ebeb5f702ad6_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-19_6b04ccc2c28a70387eb7ebeb5f702ad6_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4608