Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/07/2026, 03:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0b0db0448087cb456c46d58dc9b506ed_amadey_cobalt-strike_conti_elex.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_0b0db0448087cb456c46d58dc9b506ed_amadey_cobalt-strike_conti_elex.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-07-20_0b0db0448087cb456c46d58dc9b506ed_amadey_cobalt-strike_conti_elex.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-20_0b0db0448087cb456c46d58dc9b506ed_amadey_cobalt-strike_conti_elex.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-07-20_0b0db0448087cb456c46d58dc9b506ed_amadey_cobalt-strike_conti_elex.exe
- Size 441KB
- Sample260720-d47z7agy2x
- SHA256 00083b56162eec16ddeeba8a8a9f1cb210a806491ee991e20f7c79aafd597f72
- MD5 0b0db0448087cb456c46d58dc9b506ed
- SHA1 6f8d9a62e6b1150ece2a1205aedabc536c256cc5
- SHA512 8626ba7a6ee52639fcb6e7c2d8e574eb85b762d0a9a844220be1fb8bec8ef0d00135c8f50811eaa515c8df035dad6186c2d01ba320235162754fe480ffa4bedf
- SSDEEP 12288:TX32FX32QUvX32FX32QUT7gKNkhm/JuyXnPB+d:LmdmQUfmdmQUT7zNkhm5PB+
- TLSH T123A46D07B7E244F9F5A3453059B5DF72EB3ABC314A70972E2388E1291F30A81DA25776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10