Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/10/2026, 22:36
Behavioral task
behavioral1
Sample
2026-10-12_b3b3078bbe8e9372941127e0d0b99594_cobalt-strike_glassworm_icedid_ryuk_xworm.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-12_b3b3078bbe8e9372941127e0d0b99594_cobalt-strike_glassworm_icedid_ryuk_xworm.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-10-12_b3b3078bbe8e9372941127e0d0b99594_cobalt-strike_glassworm_icedid_ryuk_xworm.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-12_b3b3078bbe8e9372941127e0d0b99594_cobalt-strike_glassworm_icedid_ryuk_xworm.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-10-12_b3b3078bbe8e9372941127e0d0b99594_cobalt-strike_glassworm_icedid_ryuk_xworm.exe
- Size 140KB
- Sample261013-2jae7ac16p
- SHA256 023696bf1125e73a4d58b0e3aac20d00719f9abeda24146debb8f7382e7c0728
- MD5 b3b3078bbe8e9372941127e0d0b99594
- SHA1 8b50eb78cfb34ee29f7244b2b974f2f3afe42b1a
- SHA512 231fa81b848d684e394ef9d76b7a8f5f63b529adce7d1d768d0e2808bdb0123c598a54e682d4b9ace27e6497d531f61377b58acd08c1a5148c874e33726fbf38
- SSDEEP 3072:b/msHasdDOFHbAMCaExJO1EbddRsXB/IWm6rIsJkKpd:b/msHOtbMrtE8sNd
- TLSH T1C8E31914FBA64DDAE0AA4F3548B017855B3BBCA95E52DF1F348C410E5E76284CE28F78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10