bbbebb7fb23599f3a11037ebdb29c9327f3164363bd28e412ff9e8e36aa22e73

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 22:58

Target
2026-08-31_12f8a3f49bb867a32d5f1dd47c00a754_akira_cobalt-strike_glassworm_rusty-stealer.exe
Size 3.6MB
Sample260831-2xx4easyft
SHA256 bbbebb7fb23599f3a11037ebdb29c9327f3164363bd28e412ff9e8e36aa22e73
MD5 12f8a3f49bb867a32d5f1dd47c00a754
SHA1 eef66c00991e216d8ee507d6ed0b20cf8999a6c5
SHA512 dd3d2001186d3458b73c1523ddd9b091bf7e30468003de56e6b87a66686c918773f2515e5d1609bb9d9982a5b48a5f5719d3c58aac0de3625b877c7631905c13
SSDEEP 49152:1qPk6sVTM849Oy+q2BlyKEPRt6C2sCCtDlsF4FM1PnwRNDUzAeasaT8FZoL6pv58:FlQ2BlmtnOFWdTbKuhmOd
TLSH
T144063822B7641599D025C0B49356DB63A772F5DE0B30B6FB08E413703EA8DE05F7CAA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

defense_evasion

Modifies Control Panel 2 IoCs

defense_evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Control Panel\Desktop\FontSmoothing = "2"	2026-08-31_12f8a3f49bb867a32d5f1dd47c00a754_akira_cobalt-strike_glassworm_rusty-stealer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Control Panel\Desktop\FontSmoothingType = "2"	2026-08-31_12f8a3f49bb867a32d5f1dd47c00a754_akira_cobalt-strike_glassworm_rusty-stealer.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-31_12f8a3f49bb867a32d5f1dd47c00a754_akira_cobalt-strike_glassworm_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-31_12f8a3f49bb867a32d5f1dd47c00a754_akira_cobalt-strike_glassworm_rusty-stealer.exe"
1⤵
- Modifies Control Panel
PID:3416