Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/09/2026, 23:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-31_f4811ccb686f47ab66e251ad97c8a4aa_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_f4811ccb686f47ab66e251ad97c8a4aa_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-31_f4811ccb686f47ab66e251ad97c8a4aa_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-31_f4811ccb686f47ab66e251ad97c8a4aa_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-31_f4811ccb686f47ab66e251ad97c8a4aa_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
- Size 6.2MB
- Sample260901-3gdkhatvav
- SHA256 f6d0733296a99941cfe8622c0230dce7d0ee22cdead1f9d1ff86bc7a6279e775
- MD5 f4811ccb686f47ab66e251ad97c8a4aa
- SHA1 96cf457adea927a51cf3e0f723c4479b476a5042
- SHA512 6697a78cf9a0dd5b89097e78d2f25cf4a83b48ed5a9ba3ba469a078d0aaf4007902be43557db56ce0e957b653d441d2cf1c2a1ea6aedbdb08db7e0deafb4b5ec
- SSDEEP 49152:uqatglj+ES+ES+ETqatglj+ES+ES+ETqatglj+ES+ES+ETqatglj+ES+ES+ETqas:8ccccc9/fh6ImzzJoDfuBcMv+A73XA
- TLSH T1F0667C41FD8B94F1EA03057148ABD3BF5330BA058B25CBD7E6449F6FE923AD11A32256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10