Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/07/2026, 18:43
Behavioral task
behavioral1
Sample
2026-07-31_36a9295cfa528c8b3252baa1384b5a63_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_36a9295cfa528c8b3252baa1384b5a63_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"Error 66 : Decompression error : ERROR_decompressionFailed \\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Input/output error\\n\",\"error\":\"exit status 1\",\"time\":\"2026-07-31T18:43:23Z\",\"message\":\"Process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_18\",\"error\":\"Failed to query machine status: write unix @->/var/lib/sandbox/hatchvm/win11ltsc2024-20260709-en/instance_18.qmp: use of closed network connection\",\"time\":\"2026-07-31T18:43:23Z\",\"message\":\"Could not launch dirty instance\"}"
General
- Target 2026-07-31_36a9295cfa528c8b3252baa1384b5a63_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
- Size 788KB
- Sample260731-xc3e6sem4w
- SHA256 51846fe1660e903e71982e1cf4fa665a0eaa4337d92249ee14bccee4168c694c
- MD5 36a9295cfa528c8b3252baa1384b5a63
- SHA1 1564f8cb36d578fbc5d76844a299a7af454e8e5a
- SHA512 7d0861f72661d443f077ffd6d1c254156e42dcdc95c7c9aa44bef63d9c4efc72f83952f5092806b7a00a966618a59d5c9a1bc355bb0aa40ac1d1fbc7647ceb23
- SSDEEP 12288:A3ZUnXoZ+yPz5L8aEFyKUlEi/RagupERVnf:A3mnXoZjzyaEFyKUlEi/RagupETf
- TLSH T14005AF03E7A400E5E55A8630A9E54623EB75BD522B70C7DF236882152F737C0AF3A7B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10