Analysis

  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2023 09:51

Errors

Reason
wait online: exit status 1: "{\"level\":\"error\",\"cmd\":[\"qemu-img\",\"create\",\"-f\",\"qcow2\",\"-o\",\"lazy_refcounts=on,cluster_size=2M\",\"-b\",\"/var/lib/sandbox/managedvms/win10v2004/win10v2004-20230915-en/instance_1.qcow2\",\"-F\",\"qcow2\",\"/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_1-dirty.qcow2\"],\"stdout\":\"Formatting '/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_1-dirty.qcow2', fmt=qcow2 cluster_size=2097152 extended_l2=off compression_type=zlib size=274877906944 backing_file=/var/lib/sandbox/managedvms/win10v2004/win10v2004-20230915-en/instance_1.qcow2 backing_fmt=qcow2 lazy_refcounts=on refcount_bits=16\\n\",\"stderr\":\"qemu-img: /var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_1-dirty.qcow2: Could not create '/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_1-dirty.qcow2': Read-only file system\\n\",\"error\":\"exit status 1\",\"time\":\"2023-10-15T10:01:21Z\",\"message\":\"process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_1\",\"error\":\"exit status 1\",\"time\":\"2023-10-15T10:01:21Z\",\"message\":\"Could not launch dirty instance\"}"

General

  • Target

    dfa84b5a181211bf2b3cbb8f089128cabf629073e441221ad3408ece5b400b83.exe

  • Size

    4.8MB

  • MD5

    4a5e8e2cda5141b5a8fffebee0949501

  • SHA1

    aab7e9d565bbb28b7e681ae4574101deb8336e96

  • SHA256

    dfa84b5a181211bf2b3cbb8f089128cabf629073e441221ad3408ece5b400b83

  • SHA512

    d87322cba2dc8bb6b9db9dd4897c096c353947b047da60e5878fb220bf76588a59acaeeab34b5a523b221e410e829e5814eade37b8fa8248e24e9ef0d378b040

  • SSDEEP

    98304:2cR+zEDA/Fd72h7NrwjCyO6dTJ0OclWB47TA0qCwph+v9SuE:6g4KcjFhJwlH3cz2U

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads