Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/10/2026, 06:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_c66f29c363720240be9bc0b95e45d248_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_c66f29c363720240be9bc0b95e45d248_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-09-30_c66f29c363720240be9bc0b95e45d248_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-30_c66f29c363720240be9bc0b95e45d248_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-09-30_c66f29c363720240be9bc0b95e45d248_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
- Size 856KB
- Sample261001-g5vm2acc83
- SHA256 f4b560d03a67eb723642dae77ce8ebc11424c321f73faed4bc429d5a0eb17997
- MD5 c66f29c363720240be9bc0b95e45d248
- SHA1 7f1e27531cfa6da5392f052959b3ddb172c45327
- SHA512 ad9d093d08eb8d6c9916d3becaa7595f3c53bb4e7fa629aa8d6ee45b01564036997dca2b8bb26649cb38c7b1d4c5829248efac2a6fab4bbe1206a278978f600c
- SSDEEP 12288:DZ+yPz5L8aTvAwSfxL/2Dc3jDLLmt0LDQewsAjRXTc6r2e2w:DZjzyaT4aewsAjxTc6r2e2w
- TLSH T15415B023FAB0D075D23F49715BA58712EB7879214B6056CBF3A886592F213C03F3AB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10