Analysis

  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-10-2023 19:35

Errors

Reason
wait online: exit status 1: "{\"level\":\"error\",\"cmd\":[\"qemu-img\",\"create\",\"-f\",\"qcow2\",\"-o\",\"lazy_refcounts=on,cluster_size=2M\",\"-b\",\"/var/lib/sandbox/managedvms/win10v2004/win10v2004-20230915-en/instance_4.qcow2\",\"-F\",\"qcow2\",\"/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_4-dirty.qcow2\"],\"stdout\":\"Formatting '/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_4-dirty.qcow2', fmt=qcow2 cluster_size=2097152 extended_l2=off compression_type=zlib size=274877906944 backing_file=/var/lib/sandbox/managedvms/win10v2004/win10v2004-20230915-en/instance_4.qcow2 backing_fmt=qcow2 lazy_refcounts=on refcount_bits=16\\n\",\"stderr\":\"qemu-img: /var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_4-dirty.qcow2: Could not create '/var/lib/sandbox/hatchvm/win10v2004-20230915-en/instance_4-dirty.qcow2': Read-only file system\\n\",\"error\":\"exit status 1\",\"time\":\"2023-10-15T09:47:05Z\",\"message\":\"process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_4\",\"error\":\"exit status 1\",\"time\":\"2023-10-15T09:47:05Z\",\"message\":\"Could not launch dirty instance\"}"

General

  • Target

    NEAS.f246c604d65a15b70d79c1b67db110d0.exe

  • Size

    21KB

  • MD5

    f246c604d65a15b70d79c1b67db110d0

  • SHA1

    954d870c8c128b47f817778cb0e03bd7688ccb97

  • SHA256

    bbcc2d25b73b40552bc41caa51ba00e960d824783ed3f48a265bbee4e0a6ef80

  • SHA512

    c4ee405bdc4f831a50301274ed5105f94874e88710ecd5b5577b5884382f5b06cb029a4c50b33db22bea3ac7b619f29664cdda084e3a7749621132ebdddaed8d

  • SSDEEP

    192:Q54euZSchV1Efj9HjU4uMIKOFkJHwDFIp8zaubYpmc8RhCfL8TsGCc0Spxhw7nm+:I4eyhV+fxqtWiXYpgG5lFqw4gj3lh

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads