Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/10/2026, 10:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-14_e418121685bcba8bde5f3ebed2069092_amadey_cobalt-strike_darkgate_elex_hijackloader_play.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_e418121685bcba8bde5f3ebed2069092_amadey_cobalt-strike_darkgate_elex_hijackloader_play.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-14_e418121685bcba8bde5f3ebed2069092_amadey_cobalt-strike_darkgate_elex_hijackloader_play.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-14_e418121685bcba8bde5f3ebed2069092_amadey_cobalt-strike_darkgate_elex_hijackloader_play.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-10-14_e418121685bcba8bde5f3ebed2069092_amadey_cobalt-strike_darkgate_elex_hijackloader_play.exe
- Size 371KB
- Sample261014-l2a7fafe72
- SHA256 d42ba29c4a3c6df9ac477f63f3e88d826ba5fa14022acdc3353e73aafe0447b2
- MD5 e418121685bcba8bde5f3ebed2069092
- SHA1 969c6d9b19c5f026a168b27328a42e131ce099ea
- SHA512 0026521827398e5551b8b6a7517aa672ea2ac08ecd7d7b0b585ba0ff3e42da8a99c2ccb024c001b31bbaba6b7336d134579ba63dbba044faf36888b0d15a705a
- SSDEEP 6144:NEXAe6QPj93PiY+Fa7BdvGbEXAe6QP0ksB+wYl2:N2Ae6WaY+FUBk2Ae611B+wYl2
- TLSH T16C846C3176C1C476E9A3053148F8EEBA583DFE510F6499DB73984B2E0F706C2AA3156B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10