Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/08/2026, 16:57
Behavioral task
behavioral1
Sample
2026-08-12_35f203f30f31b1cec7206befd6fb74f4_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_35f203f30f31b1cec7206befd6fb74f4_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"qemu-system-x86_64: Unknown combination of migration flags: 0xf15\\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Invalid argument\\n\",\"error\":\"exit status 1\",\"time\":\"2026-08-12T16:57:42Z\",\"message\":\"Process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_10\",\"error\":\"Failed to query machine status: write unix @->/var/lib/sandbox/hatchvm/win11ltsc2024-20260709-en/instance_10.qmp: use of closed network connection\",\"time\":\"2026-08-12T16:57:43Z\",\"message\":\"Could not launch dirty instance\"}"
General
- Target 2026-08-12_35f203f30f31b1cec7206befd6fb74f4_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
- Size 3.4MB
- Sample260812-vglbcabq9s
- SHA256 eeef1205aef7fb971ab59c4edadf3760c09d2ae7b8a54a263eeb67c85bfce2a5
- MD5 35f203f30f31b1cec7206befd6fb74f4
- SHA1 79f164d8ef3341ea0c02d07d70cff17e5c7d5c71
- SHA512 d8536e458c4c1f5a6cddafeca0ce65ede5bc407e78fba94a3edad6d61c9f97b3adf480fba8a2c2422c79ca6ba129ae42195be314e3990e1a3f2f98c7b76126c3
- SSDEEP 49152:ZdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxS5b:THvfGfZvZj1/N/z/oS1
- TLSH T113F57CD2A3A600ECD977F23C85568617E7F1B817537097CB35A44AA60F237D12A3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10