Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/04/2026, 15:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_8e60b7639871c7ec9738c15d38151c09_amadey_cobalt-strike_darkgate_fabookie_glassworm_hijackl.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_8e60b7639871c7ec9738c15d38151c09_amadey_cobalt-strike_darkgate_fabookie_glassworm_hijackl.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-04-22_8e60b7639871c7ec9738c15d38151c09_amadey_cobalt-strike_darkgate_fabookie_glassworm_hijackl.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-04-22_8e60b7639871c7ec9738c15d38151c09_amadey_cobalt-strike_darkgate_fabookie_glassworm_hijackl.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-04-22_8e60b7639871c7ec9738c15d38151c09_amadey_cobalt-strike_darkgate_fabookie_glassworm_hijackl.exe
- Size 2.0MB
- Sample260422-ssa9eady81
- SHA256 32a165696b41712004a5d730ee4be003bbadeb6458d9fac89c78c6c11964515a
- MD5 8e60b7639871c7ec9738c15d38151c09
- SHA1 f03a84e255e8ec259a948c9d8f25ef2a12f742fe
- SHA512 44e1c9ae85d213c88692e1b48564b0cc652542523a65ebe9806f2c39f3a8a52a815156e8eecad983ca80fa450dd4f09e62387e90cca3b5cce9aba503c68205a6
- SSDEEP 49152:S7edCK0DZT88fIfi35DMnCIjtAydIgjdsk9WnOY56rn9TI:OK5N55sgjOk9WO1rn
- TLSH T18EA55A12BA549FFACD6B0131C9A59374A67A7C210F21E3C7629CBA1D6E31AC15D33B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10