Analysis

  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-10-2023 19:35

Errors

Reason
wait online: exit status 1: "{\"level\":\"error\",\"cmd\":[\"qemu-img\",\"create\",\"-f\",\"qcow2\",\"-o\",\"lazy_refcounts=on,cluster_size=2M\",\"-b\",\"/var/lib/sandbox/managedvms/win10v2004/win10v2004-20230915-en/instance_4.qcow2\",\"-F\",\"qcow2\",\"/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_4-dirty.qcow2\"],\"stdout\":\"Formatting '/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_4-dirty.qcow2', fmt=qcow2 cluster_size=2097152 extended_l2=off compression_type=zlib size=274877906944 backing_file=/var/lib/sandbox/managedvms/win10v2004/win10v2004-20230915-en/instance_4.qcow2 backing_fmt=qcow2 lazy_refcounts=on refcount_bits=16\\n\",\"stderr\":\"qemu-img: /var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_4-dirty.qcow2: Could not create '/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_4-dirty.qcow2': Read-only file system\\n\",\"error\":\"exit status 1\",\"time\":\"2023-10-15T09:44:00Z\",\"message\":\"process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_4\",\"error\":\"exit status 1\",\"time\":\"2023-10-15T09:44:00Z\",\"message\":\"Could not launch dirty instance\"}"

General

  • Target

    NEAS.f47c989a9c7ecde7cb5153312aa84e50.exe

  • Size

    519KB

  • MD5

    f47c989a9c7ecde7cb5153312aa84e50

  • SHA1

    ab9184e94bcb8de8e07994e7b3df58d168cf6f5e

  • SHA256

    d6e6bbdb5064ace1ab5a4bb48a8b8ce4089a9f03d3ff3370761de2c16b117bb7

  • SHA512

    f0242bb793c1c63a1207c8e0f5e4b873c1385a52fd682bf5028132f5d0eab1269b1c81a3c4834da24f013153b67af508404e6ced90183df23cb584feb74d4b9d

  • SSDEEP

    3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VkMQTCk/dN92sdNhavtrVdewnAx3wmVL:wqDAwl0xPTMiR9JSSxPUKododHW

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads