Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/07/2026, 23:38
Behavioral task
behavioral1
Sample
2026-07-15_9039bb881decd74860dc005a25cea4d3_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_9039bb881decd74860dc005a25cea4d3_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"qemu-system-x86_64: Can't find block \\nqemu-system-x86_64: Illegal RAM offset fd54f000\\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Invalid argument\\n\",\"error\":\"exit status 1\",\"time\":\"2026-07-15T23:38:34Z\",\"message\":\"Process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_16\",\"error\":\"Failed to query machine status: unexpected end of JSON input\",\"time\":\"2026-07-15T23:38:34Z\",\"message\":\"Could not launch dirty instance\"}"
General
- Target 2026-07-15_9039bb881decd74860dc005a25cea4d3_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
- Size 2.1MB
- Sample260715-3mysmabw41
- SHA256 48891a437fab9569ef4097d32b6de07f5350156a5ff0c1160434c1e9c851068b
- MD5 9039bb881decd74860dc005a25cea4d3
- SHA1 0433d7bdfe2b8a4668ba540fe8343ca86e73def9
- SHA512 5f1f46bdfb6eb8b4e0edaa2b97d1f17224e7fad344b3e6dd3261b1d4e3bbda197f888f313dcd8d706f04baf2f26337a3dff4579d89aa416bd0d309da49864851
- SSDEEP 24576:A3mnXoZ643mnXoZ6i6cMJlCUQ2RojsqixqfasTYCzD5TvinrmAYTqMi8CtBd2QHh:A3k03kHRJC56r+qJtb2IRpYq
- TLSH T10CA55B16F6644B65D07BC079C5D29A9AEA333C425F3087CB1385DB283F277D19A3A362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10