Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/05/2026, 14:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_03fa63db82fc6960294c73d4b1ef058c_amadey_bkransomware_coinminer_darkgate_elex_hawkeye_kara.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_03fa63db82fc6960294c73d4b1ef058c_amadey_bkransomware_coinminer_darkgate_elex_hawkeye_kara.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-05-22_03fa63db82fc6960294c73d4b1ef058c_amadey_bkransomware_coinminer_darkgate_elex_hawkeye_kara.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-22_03fa63db82fc6960294c73d4b1ef058c_amadey_bkransomware_coinminer_darkgate_elex_hawkeye_kara.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-05-22_03fa63db82fc6960294c73d4b1ef058c_amadey_bkransomware_coinminer_darkgate_elex_hawkeye_kara.exe
- Size 3.0MB
- Sample260522-rtms6ags8s
- SHA256 781b4e97ff15831f9ea5bf84f854cc024731e9db4ec0e04a40b0efc9ec81072d
- MD5 03fa63db82fc6960294c73d4b1ef058c
- SHA1 59969c26a1b24855552113846d1db73de9cef37f
- SHA512 dc45e2d785b5d6f8ee64c762c3e386d9b20da46bf0ed13dd169e60ec167e8fcbad2b9a27c24ec3eb53fa9b1aff1ee4f24e9e0c59853c188aef7f6e17abb8f4e8
- SSDEEP 49152:aB4sqnstLet3LyXrOO53RTqtiVvxdwq7M:a+sqnstLEcrOO53/4
- TLSH T107E5F70252F14622D0A9F57074E0671E0CB47FB54D22D65AFB44FA5EB83ABA167F2332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10