Analysis
- max time kernel
150s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/09/2026, 20:30
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-03_ec6ab89b6e0f9f7d2c2ba709b7bb4dd9_akira_blankgrabber_cobalt-strike_coinminer_gazer_glasswo.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_ec6ab89b6e0f9f7d2c2ba709b7bb4dd9_akira_blankgrabber_cobalt-strike_coinminer_gazer_glasswo.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-09-03_ec6ab89b6e0f9f7d2c2ba709b7bb4dd9_akira_blankgrabber_cobalt-strike_coinminer_gazer_glasswo.exe
- Size 17.6MB
- Sample260905-zaemfasclb
- SHA256 05301be2b0cd0e951179b08cc09fc21983d568f7617cbb929460ba05f45a0373
- MD5 ec6ab89b6e0f9f7d2c2ba709b7bb4dd9
- SHA1 a0a6440626bb07e2d08b8d53e2da38256afc975c
- SHA512 f559498a204612f8baf9eb75e684db77594f0f220af60ccee2bf4511fe8dfd91964cb548067a40a641116836ea9c6a6ec5efaddc900e2778a6a0bb83767641f9
- SSDEEP 393216:W9SLAtr+7kmitEscwyXM9Mt4Miy5aGR+i3whTnp3BEvKufG:WQAwUtEsHitHae
- TLSH T1740739E116D381C9C169C1798182672BB67B7B230331ABDF757C52F65E22B827927B0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4636 2026-09-03_ec6ab89b6e0f9f7d2c2ba709b7bb4dd9_akira_blankgrabber_cobalt-strike_coinminer_gazer_glasswo.exe 4636 2026-09-03_ec6ab89b6e0f9f7d2c2ba709b7bb4dd9_akira_blankgrabber_cobalt-strike_coinminer_gazer_glasswo.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4636 2026-09-03_ec6ab89b6e0f9f7d2c2ba709b7bb4dd9_akira_blankgrabber_cobalt-strike_coinminer_gazer_glasswo.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4636 2026-09-03_ec6ab89b6e0f9f7d2c2ba709b7bb4dd9_akira_blankgrabber_cobalt-strike_coinminer_gazer_glasswo.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-03_ec6ab89b6e0f9f7d2c2ba709b7bb4dd9_akira_blankgrabber_cobalt-strike_coinminer_gazer_glasswo.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-03_ec6ab89b6e0f9f7d2c2ba709b7bb4dd9_akira_blankgrabber_cobalt-strike_coinminer_gazer_glasswo.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4636