Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/05/2026, 12:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_3cd6d37020b93f4ffc0d05228eeeead1_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader_maze_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_3cd6d37020b93f4ffc0d05228eeeead1_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader_maze_smoke-loader_vidar.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-05-22_3cd6d37020b93f4ffc0d05228eeeead1_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader_maze_smoke-loader_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-22_3cd6d37020b93f4ffc0d05228eeeead1_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader_maze_smoke-loader_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-05-22_3cd6d37020b93f4ffc0d05228eeeead1_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader_maze_smoke-loader_vidar.exe
- Size 3.7MB
- Sample260522-pd7saac12z
- SHA256 79b1a15813efbf12f1728788a43543fc9f88b0b8c888dde0944159d03ab4f0e4
- MD5 3cd6d37020b93f4ffc0d05228eeeead1
- SHA1 03bea31d1f54b3eae0ec219577bd5755022b8114
- SHA512 5735fee7e6edb8487a20b4a78b9c485e6476fefe47901ddc1ec4fc27d010d808f4064d1e8ab39aa5dd8b774cb35733aae7605b3ee3f0e47ebb45499d723c6569
- SSDEEP 98304:iXJdWGw6VdIky/Cr4QPNIDQCIabjKoh9WGrd:sUkfy/CMSNuQWd
- TLSH T11A06B002AD0C5961CC1F3D71584186B9FA217C5FBE0E3AC76ED07E99AAB35D03A7D122
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10