Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/08/2026, 17:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_ac26ff76b06cdde433193c8e47759d64_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_ac26ff76b06cdde433193c8e47759d64_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"qemu-system-x86_64: Unknown combination of migration flags: 0x300\\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Invalid argument\\n\",\"error\":\"exit status 1\",\"time\":\"2026-08-05T17:44:35Z\",\"message\":\"Process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_16\",\"error\":\"Failed to query machine status: write unix @->/var/lib/sandbox/hatchvm/win11ltsc2024-20260709-en/instance_16.qmp: use of closed network connection\",\"time\":\"2026-08-05T17:44:35Z\",\"message\":\"Could not launch dirty instance\"}"
General
- Target 2026-08-05_ac26ff76b06cdde433193c8e47759d64_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
- Size 2.5MB
- Sample260805-wbcbxsch52
- SHA256 cc53a38d2c37daae6b4aa09064623e9fd4b825282df83f9901d4bc2ea64eae9a
- MD5 ac26ff76b06cdde433193c8e47759d64
- SHA1 a2c3aa9622f65a925436971f010af1460bafa019
- SHA512 e08ea3d41ecc77667c78b6566cbee38ca37a25f5ecc268a9ef699fb34f02f97158f5ba2ffbb2bea0c48c26a1e0706b807495cbabeb21ac0d0ace159209b519fc
- SSDEEP 24576:zfjkYahANw243npfjkYahANw243nKGEWem1gXq5L9uSWidgpm6hbpOSRKQd:P/ahew2Eh/ahew2EKzXq5L9uiibpJKQd
- TLSH T195C53811F7904068FCBF01B6CBBA6169B53BB8A007E490C752C4EAFD1F266E16DB1647
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10