Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/08/2026, 22:54
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-18_d90b2b7cb1a8590c7c6b088dc48673d9_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_d90b2b7cb1a8590c7c6b088dc48673d9_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-08-18_d90b2b7cb1a8590c7c6b088dc48673d9_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-18_d90b2b7cb1a8590c7c6b088dc48673d9_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-08-18_d90b2b7cb1a8590c7c6b088dc48673d9_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
- Size 15.6MB
- Sample260818-2vr5daan3t
- SHA256 04089ba56b8b47d4bbf989e8964983507423e3e1db57eee3ec9c05194fcb10be
- MD5 d90b2b7cb1a8590c7c6b088dc48673d9
- SHA1 5407feacf9a8676f1ff43813ba983628842e7f44
- SHA512 e51b353ec269ee87f7def36996f3084f675015e12086a07be3a6bd229260ad8badbe63a4b14736788e70173f04cd4d5ec10a64866bf25af9371fa6230570c0e8
- SSDEEP 196608:x7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTou1:xahvQHrc8u3xXJ/f4uUWHg
- TLSH T1EDF6AE17B35681E6C02AE2B88A474327D7B9BC440330A7DB16D5B76A2F37BE4573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10