Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/07/2026, 23:20
Behavioral task
behavioral1
Sample
2026-07-15_cb095913b64e18ffe754c0f250265d12_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_cb095913b64e18ffe754c0f250265d12_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"Error 66 : Decompression error : ERROR_decompressionFailed \\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Input/output error\\n\",\"error\":\"exit status 1\",\"time\":\"2026-07-15T23:20:04Z\",\"message\":\"Process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_7\",\"error\":\"Failed to query machine status: write unix @->/var/lib/sandbox/hatchvm/win11ltsc2024-20260709-en/instance_7.qmp: use of closed network connection\",\"time\":\"2026-07-15T23:20:04Z\",\"message\":\"Could not launch dirty instance\"}"
General
- Target 2026-07-15_cb095913b64e18ffe754c0f250265d12_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
- Size 5.5MB
- Sample260715-3bc2sabs6v
- SHA256 04ad824195d80939858b7dcf5ac21d54b11460dbd477b1fe1a3cdc743878aa90
- MD5 cb095913b64e18ffe754c0f250265d12
- SHA1 b3f32606de5586748e5e9e5973f8e9ade80b6583
- SHA512 75fb107c36c4046b80cbe591e0b456c2d183e513cdd3f247d4594a7b478619a91886394391d5104dbc37a9c10d2e01d8750396c4158520cc381f2b88670e95e8
- SSDEEP 98304:A3k03kHR/3k03kHR2joMr7fkZcBr/fkZcNfkZc:A3k03kHl3k03kHuoozP13PpP
- TLSH T1C0463A16F6784722D077C0B9C5D6AA5AFA3238465F308ACB0345DB283F277D5963A336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10