Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/07/2026, 05:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_db1e592661135a1b2db4bd0d310e0056_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_db1e592661135a1b2db4bd0d310e0056_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-07-10_db1e592661135a1b2db4bd0d310e0056_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-10_db1e592661135a1b2db4bd0d310e0056_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-07-10_db1e592661135a1b2db4bd0d310e0056_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
- Size 2.1MB
- Sample260710-fp7f8ads8p
- SHA256 515159334ac9de9e5a9b344117c87ae3535e69a0e26f0a6786e0524087525bb0
- MD5 db1e592661135a1b2db4bd0d310e0056
- SHA1 784e60fb46352806d009ce2accf4826dc4f0aa14
- SHA512 ed2d58f34de98586533d2fefd8893463261360b5491bd50f01d29bc3c8ef85b55f559d2411ef8d8ae90a6582950f69507565af71e2b042f84579387404faf512
- SSDEEP 24576:DZjzyaEFoHaewsAjYaEgqAZe0p4Ek4niOkl/A04szE87JKTvmwYTqMi8CtBd2QHc:h8ljTeW4SkZP4sz9MbkqJtb2I
- TLSH T1B2A52B26F6788332D0B3C0B9C5D6AB5AFE3234415B308ACB5349976C2E277D29636735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10