Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/07/2026, 15:46
Behavioral task
behavioral1
Sample
2026-07-15_2708b5493ffe7d73476d3460b00c44a9_amadey_cobalt-strike_conti_elex_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_2708b5493ffe7d73476d3460b00c44a9_amadey_cobalt-strike_conti_elex_hijackloader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"Error 66 : Decompression error : ERROR_decompressionFailed \\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Input/output error\\n\",\"error\":\"exit status 1\",\"time\":\"2026-07-15T15:46:51Z\",\"message\":\"Process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_23\",\"error\":\"Failed to query machine status: write unix @->/var/lib/sandbox/hatchvm/win11ltsc2024-20260709-en/instance_23.qmp: use of closed network connection\",\"time\":\"2026-07-15T15:46:51Z\",\"message\":\"Could not launch dirty instance\"}"
General
- Target 2026-07-15_2708b5493ffe7d73476d3460b00c44a9_amadey_cobalt-strike_conti_elex_hijackloader_vidar_wannacry.exe
- Size 944KB
- Sample260715-s73bfabs7y
- SHA256 31ed1b72b51ffe60a1dcb663ee16d202cf8a5966fc5357cc5ee5b7074fadfbaa
- MD5 2708b5493ffe7d73476d3460b00c44a9
- SHA1 80fee9cc635c67de0860efbf6c834097fd9d3a54
- SHA512 8a796c764b87cf0fc94116c02269bf84af2ff5cabc668eb635c0c6a9977ae2e84fd5568efc1449ef21122c8a7c48fb1b4269396b427a93a84ab6073de3a9d902
- SSDEEP 24576:A3mnXoZ643mnXoZ6i6cMJliLKhSaagqOaRapxjpyRa:A3k03kHRJ
- TLSH T14B25AE03EB9400E9E10AC1749AE69A23FB75BC52176097CF1368D6152F72BD0AF3E395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10