d2b6ffe4d0ef66032b3b02434b32eb8b2454715aa00ba3734acfdeb8793fba10

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 11:08

Target
2026-10-23_6b857f52b9052e76d2d3f1f0e4e9e78b_akira_cobalt-strike_glassworm_rusty-stealer.exe
Size 3.7MB
Sample261023-m82teadv2p
SHA256 d2b6ffe4d0ef66032b3b02434b32eb8b2454715aa00ba3734acfdeb8793fba10
MD5 6b857f52b9052e76d2d3f1f0e4e9e78b
SHA1 d8320e0f6d186520a41b558eb502606e901b2f57
SHA512 e0209427471cd9c23b4cf4c8b859dcdf05c84ac5ed680daf20ab02c79cbdd411531fd5fc0811872da183c5dcbcfe97faaf0f33de4885908a9b1141afd228b7dd
SSDEEP 49152:fHcu1Ic2z5bcFCy2MJGR+PEiOtpnRR7jTCw1qC0ySNwpPRAK4m1AT1/JMNYiA0l0:obyJGRK0CwUUp0x5OquhmS+
TLSH
T12B061613B7641598C031C07493665B73EB76F58A0B3C76FB98A483712EA8DE11E7CE26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

defense_evasion

Modifies Control Panel 2 IoCs

defense_evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000\Control Panel\Desktop\FontSmoothing = "2"	2026-10-23_6b857f52b9052e76d2d3f1f0e4e9e78b_akira_cobalt-strike_glassworm_rusty-stealer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000\Control Panel\Desktop\FontSmoothingType = "2"	2026-10-23_6b857f52b9052e76d2d3f1f0e4e9e78b_akira_cobalt-strike_glassworm_rusty-stealer.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-23_6b857f52b9052e76d2d3f1f0e4e9e78b_akira_cobalt-strike_glassworm_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-23_6b857f52b9052e76d2d3f1f0e4e9e78b_akira_cobalt-strike_glassworm_rusty-stealer.exe"
1⤵
- Modifies Control Panel
PID:5100