Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/07/2026, 23:16
Behavioral task
behavioral1
Sample
2026-07-15_d19f35fc9a7f6894268f113033c5fb57_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_d19f35fc9a7f6894268f113033c5fb57_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"qemu-system-x86_64: Can't find block \\nqemu-system-x86_64: Illegal RAM offset fd54f000\\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Invalid argument\\n\",\"error\":\"exit status 1\",\"time\":\"2026-07-15T23:16:13Z\",\"message\":\"Process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_16\",\"error\":\"Failed to query machine status: write unix @->/var/lib/sandbox/hatchvm/win11ltsc2024-20260709-en/instance_16.qmp: use of closed network connection\",\"time\":\"2026-07-15T23:16:13Z\",\"message\":\"Could not launch dirty instance\"}"
General
- Target 2026-07-15_d19f35fc9a7f6894268f113033c5fb57_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
- Size 2.6MB
- Sample260715-28586abs2w
- SHA256 33cfbd27ee8a87ab9115aa955eec61636b0397e9dbdd7a324b3a70046335e713
- MD5 d19f35fc9a7f6894268f113033c5fb57
- SHA1 475fb054dd6086c1b05dc73ca3b724729186da48
- SHA512 f754b470226193313dcde3e95368e460897d2f0a2ff756198b7dde883d605462b39fa2ece349cd5a2d163d3df01a8d5ad70426601f46f5aa185f8580d9ff1cdb
- SSDEEP 49152:A3kMPlj8eW4SkZP4sz9Mb5eW4SkZP4sz9Mb:A3kMafkZcNfkZc
- TLSH T1C2C52A16F6788323D0B3C0B9C5D6AB5AFA3234455B308ACB4349D72C2E277D69636739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10