Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/08/2026, 07:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_7fa3049ad88c4af892fe8539d94910ac_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_7fa3049ad88c4af892fe8539d94910ac_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-23_7fa3049ad88c4af892fe8539d94910ac_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-23_7fa3049ad88c4af892fe8539d94910ac_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-23_7fa3049ad88c4af892fe8539d94910ac_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
- Size 6.1MB
- Sample260824-jj9wyadp21
- SHA256 5e34abdec23eb2384136bdcafa7b8b843ace592c5824b2b0942c2bec9eaa60ff
- MD5 7fa3049ad88c4af892fe8539d94910ac
- SHA1 088ad190deaddf63a82b8683473813ff94fc1919
- SHA512 f6adea7ab550962d63508223dd3b2b4596ef78722ae8fe2e220f5221fc6c962462b74fdc90886fe7b56608f8e2e05bc26d25488a9407db7070fdfd4c9a0cbd03
- SSDEEP 49152:krhOL+EzrhOZXpU+EzrhOL+EzrhOL+EzrPKKfHPZ6IVMv76K8ocsCGzzJ7UDv7ze:gUnUUP/fh6ImzzJoDfuBcMv+A73XAU
- TLSH T10B567C04FADB44F5EA13463045A7927F9731B8155731CBCBD680CE7AEE23AD16A32B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10