Analysis
- max time kernel
0s - max time network
2s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/09/2026, 16:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_023251392a59cb6ac961d03858e1b3a2_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_023251392a59cb6ac961d03858e1b3a2_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-09-24_023251392a59cb6ac961d03858e1b3a2_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-24_023251392a59cb6ac961d03858e1b3a2_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-09-24_023251392a59cb6ac961d03858e1b3a2_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
- Size 1.5MB
- Sample260925-thk7asfd99
- SHA256 aab061671aafd3c8e48e7cba63772b220389c7937d105f68affb3605d9ded00b
- MD5 023251392a59cb6ac961d03858e1b3a2
- SHA1 39c7c455dd22966e5e0e13b9b6947525ea7ef29e
- SHA512 82aa930ead7dc1aa89c9dc1bf73f4a13420dff0f4b76a467c0fe0b2e3e2868e99ea6abcee880e4dfccc7395e2a457da07eac5b2c700b9e2cd4e34f1f6ca6e58d
- SSDEEP 24576:DZjzyaT4aewsAjxD85D5TvinrmyglR0Le5ji0hmxNrM:hPlja56rIPji0Aj
- TLSH T1BF755B12F6648B75D07FC075C5929656EA337C410F3087CB53A89E683E277E1AA3A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10