Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/09/2026, 22:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_980edd61196311f047989d7ceefb9b5d_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-19_980edd61196311f047989d7ceefb9b5d_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-09-19_980edd61196311f047989d7ceefb9b5d_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-19_980edd61196311f047989d7ceefb9b5d_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-09-19_980edd61196311f047989d7ceefb9b5d_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
- Size 847KB
- Sample260919-2rsazat19j
- SHA256 82ac57444e60454452f5458707586eceea64982febdd189becd27067da226a24
- MD5 980edd61196311f047989d7ceefb9b5d
- SHA1 6f31c8a8d9c33dd9b7235b4d55552c5e728fb50f
- SHA512 c327944f19f7bd959f6efc7106a211addbb8bea97257f5622dacdc8cad12a3c87cc9545bac35530f0ad3203bd9c67e876eb9ad412e6cd7d4a088e419ced9ea64
- SSDEEP 12288:DZ+yPz5L8aTvAwSfxL/2Dc3jDLLmt0LDQewsAjRXTc6YcjC:DZjzyaT4aewsAjxTc6YcjC
- TLSH T13105B023FBB0D075D23F49715BA58712EB7879214B6056CBE3A84A592F313C02F3AB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10