Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/05/2026, 15:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_03eedc41040705e829f2ea5faa238fd7_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_smoke-loader_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_03eedc41040705e829f2ea5faa238fd7_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_smoke-loader_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-05-22_03eedc41040705e829f2ea5faa238fd7_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_smoke-loader_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-22_03eedc41040705e829f2ea5faa238fd7_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_smoke-loader_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-05-22_03eedc41040705e829f2ea5faa238fd7_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_smoke-loader_wannacry.exe
- Size 1.8MB
- Sample260522-s82rasax7x
- SHA256 167c8f9d82ec2425690d6e5a80a43c095f7986679889d853920517e53ab23772
- MD5 03eedc41040705e829f2ea5faa238fd7
- SHA1 816b497bedc75407821d4841983a46510f93acbc
- SHA512 464fbe2be4a8a71edcbab59c382a6c5359a1aa145946644bb14adda317cb299c1acce4e1d0c514aa1975e56a860d4332aac862a9673a62624bb308f94f1b5b8e
- SSDEEP 49152:z4lusNDS5lSslj0/IabjKoh9Wss0LfUnT:kjNDS5lSTIabjKoh9WsCT
- TLSH T152851812AB509971C16A08B22691830E5AA57C60CB135FC7E3547EDEFFF29D12FB2631
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10