Analysis
- max time kernel
150s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/08/2026, 20:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target 2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
- Size 45.2MB
- Sample260828-y3grtsshqh
- SHA256 c3d488bd2f73a8e800f7c2a1ab7d0a14c95fa8e5f9230acd56539a76b8ef632c
- MD5 22ed27db5e91f67b5eacc14d32cfd4f9
- SHA1 c875088cfeff76263ced9bdfedc3d86bfb8c2456
- SHA512 dddb927247a6a542c105124cfa8b0a9f152a5cf39f1adeaf154309bbf905047c1f592aaf165bc8942f0e9ae953ecee3f1a43c92db9edc56c62b500bbbe0ec121
- SSDEEP 393216:FO+LA1O1UucDVyfCwdfgjV1pDLIt28MTtxOGtaB98QjoMQFBS6CKZOyKHo:Ff71WujMTt4VB98QjZQFQpKZOyKI
- TLSH T1CAA71B115B4D8785D226BD3CD0874501D3F4BF88C32E8F1B9BE09CA9669BA427A1EF4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 2472 2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe 2472 2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe - Suspicious behavior: EnumeratesProcesses 3 IoCs
pid Process 2472 2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe 2472 2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe 2472 2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2472 2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2472 2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-28_22ed27db5e91f67b5eacc14d32cfd4f9_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2472
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\loader.log
- Size 120B
- SHA256 1f52b35b675ae6b2684248ea46b92d30c72f569b05e5baa7352b29277943ff15
- MD5 39ef627b26effe83701f1b8a2a0d314a
- SHA1 c588da6e2d2c32b342b1b024b5847cb39ce23fef
- SHA512 5d10da6b73a84f15efad5cb6ab019b91317659cc8a5109ddfd441a4cd71a90458c5ee271674ed9f0a5252b15d1e431bbda44c1ddd3f48fecbc647868f12f2515
- TLSH T13BB012A9E44562F836B33120E0C1F2B42B30140AA461383DA3DE371B6055BAF2377092
- MD5 SHA1 SHA512 TLSH