Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/11/2026, 17:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_0e281e5eec2bea434ab8675971bdf161_akira_glassworm.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_0e281e5eec2bea434ab8675971bdf161_akira_glassworm.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target 2026-11-11_0e281e5eec2bea434ab8675971bdf161_akira_glassworm.exe
- Size 5.1MB
- Sample261113-v4e3vaes5v
- SHA256 018404e0a15a4c9cfeaebc67b913e198947268716f016e09dfd93bc22ac2744e
- MD5 0e281e5eec2bea434ab8675971bdf161
- SHA1 8eeaf56bcf5ba51934f877d74c4ff28126506826
- SHA512 0060c96a26e08e28eba12bddf5474a294962486c7846e731dd59b7467113ee6e060e4f989a1cff713e20cf2b82d55cb1565b1cc6d978a39acdcc1e4a4c949e7e
- SSDEEP 98304:dkpgXNNcVRsaLHlOVyOA8QanL90yryoBeVw:dkpgXNNt1hLH6V
- TLSH T19D365C47E2A650ECC45AD1B5930B6232FE31B8494735BDEF16A0D7312E25EE06B3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 3 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 2026-11-11_0e281e5eec2bea434ab8675971bdf161_akira_glassworm.exe File opened for modification C:\Windows\system32\AppVClient.exe 2026-11-11_0e281e5eec2bea434ab8675971bdf161_akira_glassworm.exe File opened for modification C:\Windows\system32\dllhost.exe 2026-11-11_0e281e5eec2bea434ab8675971bdf161_akira_glassworm.exe - Suspicious behavior: LoadsDriver 2 IoCs
pid Process 828 Process not Found 828 Process not Found - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2640 2026-11-11_0e281e5eec2bea434ab8675971bdf161_akira_glassworm.exe