Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/08/2026, 10:02
Behavioral task
behavioral1
Sample
2026-08-12_399bbc00d384cbf88d4cda96263bb581_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_399bbc00d384cbf88d4cda96263bb581_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"fatal\",\"name\":\"instance_10\",\"error\":\"Failed to open QMP socket: write unix @->/var/lib/sandbox/hatchvm/win11ltsc2024-20260709-en/instance_10.qmp: use of closed network connection\",\"time\":\"2026-08-12T10:02:23Z\",\"message\":\"Could not launch dirty instance\"}\n{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"qemu-system-x86_64: Unknown combination of migration flags: 0xf15\\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Invalid argument\\n\",\"error\":\"exit status 1\",\"time\":\"2026-08-12T10:02:23Z\",\"message\":\"Process unexpectedly exited\"}"
General
- Target 2026-08-12_399bbc00d384cbf88d4cda96263bb581_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
- Size 1.9MB
- Sample260812-l2ymqsem2x
- SHA256 0f052a5f531734d1d20b01082ccdf2a9d4758d11b81346cdd2afb1e000fddd27
- MD5 399bbc00d384cbf88d4cda96263bb581
- SHA1 d820836ffafc95af13a4c30332fde3e22776fe11
- SHA512 44fd3577770195ffe787f75d9abd555b60cc3f23425968d3161cde7e9d36a34fbe176444bb2cfc6294081a67e93788c89556e48284c384ef47907d554766a5de
- SSDEEP 24576:A3mnXoZ643mnXoZ6i6cMJlibtr5jcAkSYqyEoD5TvinrmbMD5TvinrmVD5Tvinrn:A3k03kHRJWpYq+56rX56ru56ru56rX
- TLSH T189953A16B2584FA4D06FC178C99286A6EA733C454F2097CF0394BE293F376D19A39763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10