Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/07/2026, 22:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_72f4585f2b07b3b2d3c25123b1f12686_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_72f4585f2b07b3b2d3c25123b1f12686_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-07-14_72f4585f2b07b3b2d3c25123b1f12686_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-14_72f4585f2b07b3b2d3c25123b1f12686_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-07-14_72f4585f2b07b3b2d3c25123b1f12686_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
- Size 844KB
- Sample260714-1yrscaev8m
- SHA256 c2c5629a8550a9a2a22b4da175d47a47d180726f77dfb0fe59c59c0be392b593
- MD5 72f4585f2b07b3b2d3c25123b1f12686
- SHA1 d83920bc846e5a6d931fb799d8aef25062d19571
- SHA512 ad6a5d60dbd1a4e0e9e06e94aae6c543b2035a55cf047b14fc0f569e7f031b1873badd3258bd5abd0f1669b489132f315d13a363c1c5e7ab47403ef4647300eb
- SSDEEP 12288:DZ+yPz5L8aEFoCAwSfxL/2Dc3jDLLmt0LDQewsAjR2aEg6F2/:DZjzyaEFoHaewsAjYaEg6F2/
- TLSH T11705B023EBB0D075D27F49715BB58702A6797C210B605ACBE3B84A591F313C06F3AB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10