Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
01/01/2025, 02:26
Behavioral task
behavioral1
Sample
2025-01-01_11f83a0d997048bd4e1f98501624749b_avoslocker_cobalt-strike_luca-stealer_qakbot.exe
Resource
win7-20241010-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-01-01_11f83a0d997048bd4e1f98501624749b_avoslocker_cobalt-strike_luca-stealer_qakbot.exe
Resource
win10v2004-20241007-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2025-01-01_11f83a0d997048bd4e1f98501624749b_avoslocker_cobalt-strike_luca-stealer_qakbot.exe
command="C:\Users\Admin\AppData\Local\Temp\2025-01-01_11f83a0d997048bd4e1f98501624749b_avoslocker_cobalt-strike_luca-stealer_qakbot.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2025-01-01_11f83a0d997048bd4e1f98501624749b_avoslocker_cobalt-strike_luca-stealer_qakbot.exe
- Size 273KB
- Sample250101-cxb4hatleq
- SHA256 4363fc166e65ed4e2e49e79bef53e11f54b95bfc8d8373fc36b8eafbbd6f21ce
- MD5 11f83a0d997048bd4e1f98501624749b
- SHA1 aee7d4fb025c4852da099db340f3d742a0d768e0
- SHA512 d1001a26eb78b54869a3ab4717845ef062ddc4fa4a4cf72f3d3ebd45fa88673e1efe3dea397486fb4ec33a2ad8d1e1cf212c34be6d0e93d5730eaebd06884613
- SSDEEP 6144:TsapuAps94TBKk25XD8i1tDal4/gKEN+PXoL5qqDOWS:TlpuApexXD8i1tDal4c50qC
- MD5 SHA1 SHA512 SSDEEP
Score
1/10