Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/04/2026, 12:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_064ec56ed82eaca6996c2664e47f0e5c_amadey_cobalt-strike_coinminer_glassworm_hijackloader_ic.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_064ec56ed82eaca6996c2664e47f0e5c_amadey_cobalt-strike_coinminer_glassworm_hijackloader_ic.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-04-17_064ec56ed82eaca6996c2664e47f0e5c_amadey_cobalt-strike_coinminer_glassworm_hijackloader_ic.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-04-17_064ec56ed82eaca6996c2664e47f0e5c_amadey_cobalt-strike_coinminer_glassworm_hijackloader_ic.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-04-17_064ec56ed82eaca6996c2664e47f0e5c_amadey_cobalt-strike_coinminer_glassworm_hijackloader_ic.exe
- Size 7.6MB
- Sample260417-phf55adw2m
- SHA256 198c9154d37c94fc48cbf44bf7560733bd3187c7c52185d12e3960bc4bb80306
- MD5 064ec56ed82eaca6996c2664e47f0e5c
- SHA1 f95a46646956d32b7503a5185f9d285e48fde213
- SHA512 09ff6ef200e0f1dd816ee046497a9d0bfe79db87357f7daf5b807dc5fe1c9a3ad1f64d8d8e38ae2457be1602ca37ecb3b67aa67bb47a223e3d29e8384f00fb49
- SSDEEP 98304:sIo6qzBPxidELapIEDN+d8MUSXIYa3Y4zg:pqzBUdEcIEhEU8IBtzg
- TLSH T16D865B26B29500ACC59BC078CB4745279BB07C9A0BF19AEB1644B6E52F73AF43F39705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10