Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/11/2026, 05:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_e7029351265b0fad70595ec8fdf0b30d_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_e7029351265b0fad70595ec8fdf0b30d_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-11-01_e7029351265b0fad70595ec8fdf0b30d_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-11-01_e7029351265b0fad70595ec8fdf0b30d_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-11-01_e7029351265b0fad70595ec8fdf0b30d_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
- Size 882KB
- Sample261102-fn89eszzf1
- SHA256 4e747d2b32f30d3b52c4ac8642e6f4555a947dce247bfcde9be70c3907b31360
- MD5 e7029351265b0fad70595ec8fdf0b30d
- SHA1 3917c51d28d2db3b00a22fcc4fc2d6c42c57d7ef
- SHA512 3bf30977841208e876f6eb3b357df00275a1e9e87874a097dd05a9b9b13a70dfb149c15d3c5237d6c0c031d73ce0662868f30914254779860293897e5a44aa8c
- SSDEEP 12288:DZ+yPz5L8aEFoCAwSfxL/2Dc3jDLLmt0LDQewsAjR2aEpHa87fDaQw:DZjzyaEFoHaewsAjYaEpHa87fDaQw
- TLSH T16615B023EBB090B5D27F49715BB58703A6797C210B505ACBE3B84A591F313C06F3AB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10