Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/10/2026, 10:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_9378eba744620983ebf66a41acfaf4f0_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_9378eba744620983ebf66a41acfaf4f0_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-09-30_9378eba744620983ebf66a41acfaf4f0_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-30_9378eba744620983ebf66a41acfaf4f0_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-09-30_9378eba744620983ebf66a41acfaf4f0_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
- Size 1003KB
- Sample261001-l136tsvepd
- SHA256 5702ebc881cd8581d9f9df46d473240b6efb1aaff5af6cc06df30b8e5ed1ef81
- MD5 9378eba744620983ebf66a41acfaf4f0
- SHA1 9bb9e1a6e83fa52c1da3f4f0ea5cc5cd7bbe67c8
- SHA512 9b45e409e56685a88e5ef3486bcc9d0ba91acd16a904bb8ca9a06567ec42b74c91e0a4527551e0aead8c45f1efc05adee18f34be368b0b361e051135e959e661
- SSDEEP 12288:DZ+yPz5L8aEFoCAwSfxL/2Dc3jDLLmt0LDQewsAjR2aEpGoEjEhXsf3z:DZjzyaEFoHaewsAjYaEpGoEjEkD
- TLSH T123258D22EAA090A5D26F4570DB658702B6377C210BE096CBA3E4D67D1F312C06FF9B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10