Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/07/2026, 06:51
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-07_e9e58045e3caac3ac2d876a09f0b8d10_cobalt-strike_elex_glassworm_icedid_redline-stealer_rhad.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_e9e58045e3caac3ac2d876a09f0b8d10_cobalt-strike_elex_glassworm_icedid_redline-stealer_rhad.exe
Resource
win11ltsc2024-20260706-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"Error 66 : Decompression error : ERROR_decompressionFailed \\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Input/output error\\n\",\"error\":\"exit status 1\",\"time\":\"2026-07-07T06:51:09Z\",\"message\":\"Process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_5\",\"error\":\"Failed to query machine status: write unix @->/var/lib/sandbox/hatchvm/win11ltsc2024-20260706-en/instance_5.qmp: use of closed network connection\",\"time\":\"2026-07-07T06:51:09Z\",\"message\":\"Could not launch dirty instance\"}"
General
- Target 2026-07-07_e9e58045e3caac3ac2d876a09f0b8d10_cobalt-strike_elex_glassworm_icedid_redline-stealer_rhad.exe
- Size 564KB
- Sample260707-hmhq7agy6l
- SHA256 03bcdf6bcf66e5978d1d84439dc0d7b4856a54e984170a1ab1b2d52ef371edf5
- MD5 e9e58045e3caac3ac2d876a09f0b8d10
- SHA1 2f0db5040f9892b04d0c3725ccafd17e49a77d40
- SHA512 628948a334c33ba1437e15df30b711c6d2b20a1241e55efc0c4c67bad2234c1bd6137e956db220aeb7f45290a85dce2e40a3305d22952d0c201da4e9a13846a3
- SSDEEP 12288:6tg6DsYfv3zdXSS/4Txv9HsMFZzN/E/msup7srtg6DsYfv3zdXSS/4Txv9Q:6u6P339SSgT73Tku6P339SSgT7Q
- TLSH T1B5C49E20F38084F2D56B093184B4CBA15A76BC7A5A61C54F37DC766E1F733D08D29BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10