Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/04/2026, 03:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_cd5583dd8e9857fa1d5681cca206c928_amadey_cobalt-strike_darkgate_glassworm_hawkeye_smoke-loader_vidar.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_cd5583dd8e9857fa1d5681cca206c928_amadey_cobalt-strike_darkgate_glassworm_hawkeye_smoke-loader_vidar.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-04-24_cd5583dd8e9857fa1d5681cca206c928_amadey_cobalt-strike_darkgate_glassworm_hawkeye_smoke-loader_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-04-24_cd5583dd8e9857fa1d5681cca206c928_amadey_cobalt-strike_darkgate_glassworm_hawkeye_smoke-loader_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-04-24_cd5583dd8e9857fa1d5681cca206c928_amadey_cobalt-strike_darkgate_glassworm_hawkeye_smoke-loader_vidar.exe
- Size 1.1MB
- Sample260424-ebskgad14y
- SHA256 a32788bcb1841b5ff27a16198b9ac750a41e036d9b468c3e1c625790f3a01931
- MD5 cd5583dd8e9857fa1d5681cca206c928
- SHA1 2e04c7eea2ee3d8fd1a8029fd57f205477fd93e8
- SHA512 a294d67fbb2c1983a8398687667e1d0142f541a7946ca4f2c4237e80341e0bfed5a828063e6223db4b898fb76bc3501489b1746d54b285ce15132c7ab0986f5d
- SSDEEP 12288:jEy6xMGNTCWsTGQ4/9Z4+WrCpAwSfxL/2Dc3jDLLmt0LDQewsAjRR7NrapUrE9+i:jt6xDx7daaewsAj7papUrEZ3G7+
- TLSH T109355B63EAB4A4E1E2BB48705E75C7009B35BD710F2146DF9278B72D4D326E06E35B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10