Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/08/2026, 12:58
Behavioral task
behavioral1
Sample
2026-08-12_a5b9c5ba50985b71e1d54a0dac77ef57_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_a5b9c5ba50985b71e1d54a0dac77ef57_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"qemu-system-x86_64: Unknown combination of migration flags: 0xf15\\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Invalid argument\\n\",\"error\":\"exit status 1\",\"time\":\"2026-08-12T12:58:34Z\",\"message\":\"Process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_10\",\"error\":\"Failed to query machine status: write unix @->/var/lib/sandbox/hatchvm/win11ltsc2024-20260709-en/instance_10.qmp: use of closed network connection\",\"time\":\"2026-08-12T12:58:34Z\",\"message\":\"Could not launch dirty instance\"}"
General
- Target 2026-08-12_a5b9c5ba50985b71e1d54a0dac77ef57_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
- Size 2.8MB
- Sample260812-p7rcdsxeld
- SHA256 f176d4280991d6670360e0e1ff91508c5006fe3f89eebabd9cfadc4581d840e1
- MD5 a5b9c5ba50985b71e1d54a0dac77ef57
- SHA1 41d5e7f7c70359ad87faf2b70f1cae0dc5db3747
- SHA512 8b223d4e16953621adcfb9511605f5b79eaee1be6068e2760f678492de9daa0152f0e1f1e70e4b79515ac8bc8a30c8036f2a7a99d4f4bb862d6e9f4a35dfa965
- SSDEEP 49152:A3k03kB56rCeW4SkZP4sz9MbkqJtb2IRPji0Aj:A3k03kCrafkZckYjo
- TLSH T12AD51A16F6788722D077C0B9C5D2A69AFA3238455F308ACB0345DB2C3E277D5963A736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10