Analysis

  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2023 10:15

Errors

Reason
wait online: exit status 1: "{\"level\":\"error\",\"cmd\":[\"qemu-img\",\"create\",\"-f\",\"qcow2\",\"-o\",\"lazy_refcounts=on,cluster_size=2M\",\"-b\",\"/var/lib/sandbox/managedvms/win10v2004/win10v2004-20230915-en/instance_22.qcow2\",\"-F\",\"qcow2\",\"/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_22-dirty.qcow2\"],\"stdout\":\"Formatting '/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_22-dirty.qcow2', fmt=qcow2 cluster_size=2097152 extended_l2=off compression_type=zlib size=274877906944 backing_file=/var/lib/sandbox/managedvms/win10v2004/win10v2004-20230915-en/instance_22.qcow2 backing_fmt=qcow2 lazy_refcounts=on refcount_bits=16\\n\",\"stderr\":\"qemu-img: /var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_22-dirty.qcow2: Could not create '/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_22-dirty.qcow2': Read-only file system\\n\",\"error\":\"exit status 1\",\"time\":\"2023-10-15T10:07:44Z\",\"message\":\"process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_22\",\"error\":\"exit status 1\",\"time\":\"2023-10-15T10:07:44Z\",\"message\":\"Could not launch dirty instance\"}"

General

  • Target

    Rainbow.exe

  • Size

    5.8MB

  • MD5

    9e69201adf02cc19b1e603cd24a4f3ec

  • SHA1

    25191f0caad896a88baaa804355eb131506cdad8

  • SHA256

    ffeb7be37b74067c308ed812b77a70a6a7cacb5c8da8a01affb1142b7f404166

  • SHA512

    c551e00f8f5d6b16c59806df91277a85b49d4f0985760cb6adbb959ca17f788e4875333a814b41858f5b282724be3e7ea022835e396c894b4a96d62ca5239337

  • SSDEEP

    98304:DCaPHuVqHk2kcH2GGTNYJWomtkca689MAxI0kNEy9c2NHtBZJ290iE5dDf:DCaPUDhGCNtoYkcN89Fa0n+DNNBZEezD

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads