Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/07/2026, 16:50
Behavioral task
behavioral1
Sample
2026-07-15_914fccd7382f514d604b0653f6c03053_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_914fccd7382f514d604b0653f6c03053_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"Error 66 : Decompression error : ERROR_decompressionFailed \\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Input/output error\\n\",\"error\":\"exit status 1\",\"time\":\"2026-07-15T16:50:06Z\",\"message\":\"Process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_7\",\"error\":\"Failed to query machine status: write unix @->/var/lib/sandbox/hatchvm/win11ltsc2024-20260709-en/instance_7.qmp: use of closed network connection\",\"time\":\"2026-07-15T16:50:06Z\",\"message\":\"Could not launch dirty instance\"}"
General
- Target 2026-07-15_914fccd7382f514d604b0653f6c03053_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
- Size 3.6MB
- Sample260715-vb8vfscx2s
- SHA256 b9cacb901b91ecf2510efe793b0268038ce3978c2d9875605e782ba0ddfae5b4
- MD5 914fccd7382f514d604b0653f6c03053
- SHA1 b5ede423ed958184d6cf9cd17ffa35c39d8f617f
- SHA512 b9db0912681f29c587b4c278ab9d8bbe60dc146c038766f66add8cab06f2f69e949cfba3ab80a2c9f378b64170fe96b8e355b5936253f6f4502c15eb7e35248b
- SSDEEP 49152:A3k03kHRJAUOlk0deW4SkZP4sz9Mbv56rgeW4SkZP4sz9Mb:A3k03kHRIBfkZcQrsfkZc
- TLSH T176062916F6788762D07FC079C7D6AA55FA3338410BA086CB0285D73C2F276D19AB9727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10