Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/09/2026, 08:49
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-09-07_a7bfbece0bebedfcc833fb099606c8fb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_a7bfbece0bebedfcc833fb099606c8fb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-09-07_a7bfbece0bebedfcc833fb099606c8fb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-07_a7bfbece0bebedfcc833fb099606c8fb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-09-07_a7bfbece0bebedfcc833fb099606c8fb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
- Size 15.2MB
- Sample260908-krbvjswepe
- SHA256 4f699fb719fa135654597f734183c4561f8f4f799d942d8edd4269c972cec4fa
- MD5 a7bfbece0bebedfcc833fb099606c8fb
- SHA1 958cbe1e85137084ea67ae693712577012720892
- SHA512 025e9a04c890f7b3fc5627eee89ca7545385aa7ab84ddba939ff5c50056523de1319a69f886fb6fb3c8474d181e92c727fedcb61e7d7896b778408cb23d00646
- SSDEEP 196608:D27APhNNECwHrc8u3x3AEcq/fByuKlWH3CTou1:iahvQHrc8u3xXJ/f4uUWHg
- TLSH T1E4F69E17B35681E6C02AD2B88A474322D7B9BC440334A7DB16E5B7692F37BE45B3B350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10