Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/05/2026, 18:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_fceb0f82566152d9896c28d0e862a384_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader_maze_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_fceb0f82566152d9896c28d0e862a384_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader_maze_smoke-loader_vidar.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-05-23_fceb0f82566152d9896c28d0e862a384_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader_maze_smoke-loader_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-23_fceb0f82566152d9896c28d0e862a384_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader_maze_smoke-loader_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-05-23_fceb0f82566152d9896c28d0e862a384_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader_maze_smoke-loader_vidar.exe
- Size 3.2MB
- Sample260523-wra4ssbs3t
- SHA256 a46172e227c2474849a945328be80719f95005a783b7d6fae03613f4cc983777
- MD5 fceb0f82566152d9896c28d0e862a384
- SHA1 e5abd5d9621e2d69395a05495446361dd412fff1
- SHA512 da1233cd1eebda7ad45465e5594516eee06f5f31e024ce563f1aecdb02a527ed8a789866513728049fe66f370f5048d4173b73f1927288f49562e884e5058b12
- SSDEEP 98304:iXJdWGw6VdIky/Cr4QPNIDQCIabjKoh9WGr2K:sUkfy/CMSNuQW2K
- TLSH T188F55A12A6009E61CC1E0D7160559732FA627C9F3F1E33C7AF547E2A6A335E03AB6617
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10