Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/09/2026, 19:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_673f8e46ae0985507c2f11e16688eb67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_673f8e46ae0985507c2f11e16688eb67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-09-29_673f8e46ae0985507c2f11e16688eb67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-29_673f8e46ae0985507c2f11e16688eb67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-09-29_673f8e46ae0985507c2f11e16688eb67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
- Size 3.0MB
- Sample260930-yn8xrstenb
- SHA256 f08952282713000973338406c1a5feb115f57eb4b051a895a23683d8089f8c43
- MD5 673f8e46ae0985507c2f11e16688eb67
- SHA1 1ff04d25b478118e8a088b9d110df6f8306c9c7b
- SHA512 1c162351a831833153dd362dcc005a1eccfe8522e42b1d0e0036d5a2dfcf7101fb6e6aecd28e393bbe05d32459b903ae9fec0b79617838b884051965580d2add
- SSDEEP 24576:lt1LA5rXVav9MkLaewsAjlCqnstLyUktHIiLy/SJx:ljRv9MLljQqnstLet3Ly4x
- TLSH T1B1E563035DAD4231D06FBD302DA0C39E08A57E518D12B95ABFC0FE9DE5799E176AC232
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10