Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/10/2026, 04:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_eb984fec56a5b4d34be9cdfe60b46bad_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_eb984fec56a5b4d34be9cdfe60b46bad_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-22_eb984fec56a5b4d34be9cdfe60b46bad_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-22_eb984fec56a5b4d34be9cdfe60b46bad_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-10-22_eb984fec56a5b4d34be9cdfe60b46bad_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
- Size 1.8MB
- Sample261023-emfp2swva1
- SHA256 cb5287879ca43de9ccea7a2a43ff23da0d41ec9b70dfa95aad40b51aae96c03a
- MD5 eb984fec56a5b4d34be9cdfe60b46bad
- SHA1 83ea58026e84676ee0a34ee28731ff1ac749f3d4
- SHA512 f9a53d36bb5ac255c97f8f4c586f8da68f5e5cd15eb9c848d5aa145267da8453fdadaa8e16caa60f0100ca9240f1ab482ed276b160acbaf77a54ab158be6596a
- SSDEEP 24576:DZjzyaT4aewsAjx9EaBQfZe0p4Ek4niOkl/A04szE87JKTvmwyyCUq7lfHLJ:hPljYeW4SkZP4sz9Mb/TeX
- TLSH T12D954A16F6788373D0B3C0B9C5D6AB6AFA3234410B308ACB5359C76D2E276D19A39735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10