Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 15:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_7432a70dc914caa221f586c60143593f_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_7432a70dc914caa221f586c60143593f_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-20_7432a70dc914caa221f586c60143593f_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-20_7432a70dc914caa221f586c60143593f_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-20_7432a70dc914caa221f586c60143593f_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
- Size 1.0MB
- Sample260820-sppbvss1ew
- SHA256 63689593fec8f566ebbe1e8e50b7834e204d46caa12ef1335b11ab9b53b8e2b5
- MD5 7432a70dc914caa221f586c60143593f
- SHA1 d5931d13205b811c6b44ec60f79a1579b002a938
- SHA512 b66d3f20a1785a6a8c0c597cba2f444ce7bbb2a5e68f095170b2508845e9f1008363ffb62ea078d13dac0b17512baea75d76987e5d1b3299af4f329eb16da747
- SSDEEP 12288:DZ+yPz5L8aTvAwSfxL/2Dc3jDLLmt0LDQewsAjRXTcgG6mlzD3JeU7vinrmC:DZjzyaT4aewsAjxTcgG6mlzD5TvinrmC
- TLSH T11C359D22EAA48FB5C12F45749AA18712E67B7C114F5047CBA3A85E293F323C06F39757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10